https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 03:40:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0793 https://cve.radiocsirt.org/vuln/euvd-2026-252788 EUVD-2026-252788 https://cve.radiocsirt.org/vuln/euvd-2026-252788 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43800 <p>Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.</p> <p>Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43800 https://cve.radiocsirt.org/vuln/ghsa-jfv5-r382-xvwh <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.dynamic.data.mapping.form.field.type</p> <p>Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.dynamic.data.mapping.form.field.type</p> <p>Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.</p> https://cve.radiocsirt.org/vuln/ghsa-jfv5-r382-xvwh https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2064