https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:41:31.387741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-42498 CVE-2023-42498 2026-10-05T20:41:31.388761+00:00

Affected: Liferay Portal, Liferay DXP

Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 4 through 92 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_key parameter.