https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:30:32.740307+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/fkie_cve-2025-43774 fkie_cve-2025-43774 2026-10-08T20:30:32.773501+00:00

Rejected reason: This CVE ID is rejected. The reported vulnerability was found to be present only in a feature that was under development and protected by a beta feature flag. As a result, the issue was not exploitable in the official or public releases within the specified affected ranges, making this a false positive for officially released versions.

 https://cve.radiocsirt.org/vuln/ghsa-qgj5-4qvg-2f8c GHSA-qgj5-4qvg-2f8c — Liferay Portal is vulnerable to XSS attack through its Style Book theme 2026-10-08T20:30:32.773554+00:00

Affected: Maven: com.liferay:com.liferay.frontend.taglib.clay

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1990 WID-SEC-W-2025-1990 — Liferay Portal: Mehrere Schwachstellen 2026-10-08T20:30:32.773583+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen oder einen Cross Site Scripting Angriff durchzuführen.