Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:03:31 +0000 certfr-2025-avi-0715 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0715 certfr-2025-avi-0715 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0715 EUVD-2026-250217 https://cve.radiocsirt.org/vuln/euvd-2026-250217 EUVD-2026-250217 https://cve.radiocsirt.org/vuln/euvd-2026-250217 fkie_cve-2025-43742 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43742 <p>A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript in web content for friendly urls.</p> <p>A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript in web content for friendly urls.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43742 GHSA-3fp2-6mwq-4q3j — Liferay Portal Vulnerable to Cross-Site Scripting through URLs https://cve.radiocsirt.org/vuln/ghsa-3fp2-6mwq-4q3j <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.layout.type.controller.display.page</p> <p>A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript in web content for friendly urls.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.layout.type.controller.display.page</p> <p>A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.3, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript in web content for friendly urls.</p> https://cve.radiocsirt.org/vuln/ghsa-3fp2-6mwq-4q3j WID-SEC-W-2025-1877 — Liferay Portal und DXP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1877 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1877