Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 00:42:38 +0000 certfr-2025-avi-0785 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0785 certfr-2025-avi-0785 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0785 EUVD-2026-252428 https://cve.radiocsirt.org/vuln/euvd-2026-252428 EUVD-2026-252428 https://cve.radiocsirt.org/vuln/euvd-2026-252428 fkie_cve-2025-43785 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43785 <p>Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.</p> <p>Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43785 GHSA-66x6-8jgv-qpfh — Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting https://cve.radiocsirt.org/vuln/ghsa-66x6-8jgv-qpfh <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.portal.workflow.task.web</p> <p>A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.portal.workflow.task.web</p> <p>A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.</p> https://cve.radiocsirt.org/vuln/ghsa-66x6-8jgv-qpfh WID-SEC-W-2025-2030 — Liferay Portal und DXPL: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2030 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2030