Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:37:11 +0000 certfr-2025-avi-0718 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Certaines d'entre elles permettent à un atta… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0718 certfr-2025-avi-0718 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0718 EUVD-2026-250379 https://cve.radiocsirt.org/vuln/euvd-2026-250379 EUVD-2026-250379 https://cve.radiocsirt.org/vuln/euvd-2026-250379 fkie_cve-2025-43755 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43755 <p>A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.</p> <p>A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43755 GHSA-58cq-8wm2-6m87 — Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter https://cve.radiocsirt.org/vuln/ghsa-58cq-8wm2-6m87 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.layout.admin.web</p> <p>A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.layout.admin.web</p> <p>A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.17 and 7.4 GA through update 92 allows an remote authenticated attacker to inject JavaScript into the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_type parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-58cq-8wm2-6m87 WID-SEC-W-2025-1894 — Liferay Portal und DXP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1894 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Dateien zu manipulieren, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1894