https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T01:29:33.185637+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0375 certfr-2025-avi-0375 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer une injection de code indirect… 2026-10-21T01:29:33.188664+00:00 certfr-2025-avi-0375 https://cve.radiocsirt.org/vuln/euvd-2026-238040 EUVD-2026-238040 2026-10-21T01:29:33.188698+00:00 EUVD-2026-238040 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4388 fkie_cve-2025-4388 2026-10-21T01:29:33.188713+00:00

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.

 https://cve.radiocsirt.org/vuln/ghsa-p2f8-vq4r-gqg3 GHSA-p2f8-vq4r-gqg3 — Liferay Portal Reflected XSS in marketplace-app-manager-web 2026-10-21T01:29:33.188740+00:00

Affected: Maven: com.liferay:com.liferay.marketplace.app.manager.web

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0950 WID-SEC-W-2025-0950 — Liferay Liferay DXP: Schwachstelle ermöglicht Cross-Site Scripting 2026-10-21T01:29:33.188764+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.