https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:24:10 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252610 EUVD-2026-252610 https://cve.radiocsirt.org/vuln/euvd-2026-252610 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43794 <p>Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration&#39;s (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.</p> <p>Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration&#39;s (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43794 https://cve.radiocsirt.org/vuln/ghsa-r45v-2289-jgr4 <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration&#39;s (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration&#39;s (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.</p> https://cve.radiocsirt.org/vuln/ghsa-r45v-2289-jgr4 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2052 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2052