Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:53:59 +0000 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 EUVD-2026-159263 https://cve.radiocsirt.org/vuln/euvd-2026-159263 EUVD-2026-159263 https://cve.radiocsirt.org/vuln/euvd-2026-159263 fkie_cve-2024-25603 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25603 <p>Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module&#39;s DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.</p> <p>Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module&#39;s DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25603 GHSA-44jg-jgjx-3xg5 — Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting https://cve.radiocsirt.org/vuln/ghsa-44jg-jgjx-3xg5 <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module&#39;s DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module&#39;s DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allows remote authenticated users to inject arbitrary web script or HTML via the instanceId parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-44jg-jgjx-3xg5 gsd-2024-25603 https://cve.radiocsirt.org/vuln/gsd-2024-25603 gsd-2024-25603 https://cve.radiocsirt.org/vuln/gsd-2024-25603 WID-SEC-W-2024-0440 — Liferay Portal und Liferay DXP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0440