https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 20:07:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-196776 EUVD-2026-196776 https://cve.radiocsirt.org/vuln/euvd-2026-196776 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33940 <p>Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App&#39;s IFrame URL.</p> <p>Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App&#39;s IFrame URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33940 https://cve.radiocsirt.org/vuln/ghsa-x82q-mr23-27jc <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App&#39;s IFrame URL.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App&#39;s IFrame URL.</p> https://cve.radiocsirt.org/vuln/ghsa-x82q-mr23-27jc https://cve.radiocsirt.org/vuln/gsd-2023-33940 gsd-2023-33940 https://cve.radiocsirt.org/vuln/gsd-2023-33940