https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:49:55 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-4232 EUVD-2026-4232 https://cve.radiocsirt.org/vuln/euvd-2026-4232 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25602 <p>Stored cross-site scripting (XSS) vulnerability in Users Admin module&#39;s edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into an organization’s “Name” text field</p> <p>Stored cross-site scripting (XSS) vulnerability in Users Admin module&#39;s edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into an organization’s “Name” text field</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25602 https://cve.radiocsirt.org/vuln/ghsa-v2xq-m22w-jmpr <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Stored cross-site scripting (XSS) vulnerability in Users Admin module&#39;s edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into an organization’s “Name” text field</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Stored cross-site scripting (XSS) vulnerability in Users Admin module&#39;s edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into an organization’s “Name” text field</p> https://cve.radiocsirt.org/vuln/ghsa-v2xq-m22w-jmpr https://cve.radiocsirt.org/vuln/gsd-2024-25602 gsd-2024-25602 https://cve.radiocsirt.org/vuln/gsd-2024-25602 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440