Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:19:13 +0000 certfr-2022-avi-431 — De multiples vulnérabilités ont été découvertes dans Liferay Portal. Elles permettent à un attaquant de provoquer une i… https://cve.radiocsirt.org/vuln/certfr-2022-avi-431 certfr-2022-avi-431 https://cve.radiocsirt.org/vuln/certfr-2022-avi-431 EUVD-2026-334504 https://cve.radiocsirt.org/vuln/euvd-2026-334504 EUVD-2026-334504 https://cve.radiocsirt.org/vuln/euvd-2026-334504 fkie_cve-2022-26596 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26596 <p>Cross-site scripting (XSS) vulnerability in Journal module&#39;s web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.</p> <p>Cross-site scripting (XSS) vulnerability in Journal module&#39;s web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26596 GHSA-w7f2-6896-6mm2 — Liferay Portal and Liferay DXP allows arbitrary injection via web content template names https://cve.radiocsirt.org/vuln/ghsa-w7f2-6896-6mm2 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.journal.content.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in Journal module&#39;s web content display configuration page before 5.0.15 in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.journal.content.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in Journal module&#39;s web content display configuration page before 5.0.15 in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to inject arbitrary web script or HTML via web content template names.</p> https://cve.radiocsirt.org/vuln/ghsa-w7f2-6896-6mm2 gsd-2022-26596 https://cve.radiocsirt.org/vuln/gsd-2022-26596 gsd-2022-26596 https://cve.radiocsirt.org/vuln/gsd-2022-26596