https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:15:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334678 EUVD-2026-334678 https://cve.radiocsirt.org/vuln/euvd-2026-334678 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42115 <p>Cross-site scripting (XSS) vulnerability in the Object module&#39;s edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field&#39;s `Label` text field.</p> <p>Cross-site scripting (XSS) vulnerability in the Object module&#39;s edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field&#39;s `Label` text field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42115 https://cve.radiocsirt.org/vuln/ghsa-x43w-xphx-86w3 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.object.web</p> <p>Cross-site scripting (XSS) vulnerability in the Object module&#39;s edit object details page in Liferay Object Web before 1.0.99 from Liferay Portal (7.4.3.4 through 7.4.3.36) allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field&#39;s `Label` text field.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.object.web</p> <p>Cross-site scripting (XSS) vulnerability in the Object module&#39;s edit object details page in Liferay Object Web before 1.0.99 from Liferay Portal (7.4.3.4 through 7.4.3.36) allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field&#39;s `Label` text field.</p> https://cve.radiocsirt.org/vuln/ghsa-x43w-xphx-86w3 https://cve.radiocsirt.org/vuln/gsd-2022-42115 gsd-2022-42115 https://cve.radiocsirt.org/vuln/gsd-2022-42115