https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:20:08.080660+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-05T23:20:08.132538+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-254412 EUVD-2026-254412 2026-10-05T23:20:08.132580+00:00 EUVD-2026-254412 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43829 fkie_cve-2025-43829 2026-10-05T23:20:08.132596+00:00

Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a SVG file.

 https://cve.radiocsirt.org/vuln/ghsa-893r-jr58-3hxr GHSA-893r-jr58-3hxr — Liferay Portal Commerce Shop is vulnerable to Stored XSS through SVG file 2026-10-05T23:20:08.132627+00:00

Affected: Maven: com.liferay.commerce:com.liferay.commerce.shop.by.diagram.web

There is a Stored Cross-Site Scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a SVG file.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2232 WID-SEC-W-2025-2232 — Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-05T23:20:08.132652+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.