https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 07:52:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-196774 EUVD-2026-196774 https://cve.radiocsirt.org/vuln/euvd-2026-196774 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33942 <p>Cross-site scripting (XSS) vulnerability in the Web Content Display widget&#39;s article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article&#39;s `Title` field.</p> <p>Cross-site scripting (XSS) vulnerability in the Web Content Display widget&#39;s article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article&#39;s `Title` field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-33942 https://cve.radiocsirt.org/vuln/ghsa-wv99-wmpf-jrqr <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Cross-site scripting (XSS) vulnerability in the Web Content Display widget&#39;s article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article&#39;s `Title` field.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>Cross-site scripting (XSS) vulnerability in the Web Content Display widget&#39;s article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article&#39;s `Title` field.</p> https://cve.radiocsirt.org/vuln/ghsa-wv99-wmpf-jrqr https://cve.radiocsirt.org/vuln/gsd-2023-33942 gsd-2023-33942 https://cve.radiocsirt.org/vuln/gsd-2023-33942