Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 14:46:20 +0000 certfr-2022-avi-397 — De multiples vulnérabilités ont été découvertes dans Liferay Portal. Elles permettent à un attaquant de provoquer un co… https://cve.radiocsirt.org/vuln/certfr-2022-avi-397 certfr-2022-avi-397 https://cve.radiocsirt.org/vuln/certfr-2022-avi-397 EUVD-2026-334501 https://cve.radiocsirt.org/vuln/euvd-2026-334501 EUVD-2026-334501 https://cve.radiocsirt.org/vuln/euvd-2026-334501 fkie_cve-2022-26593 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26593 <p>Cross-site scripting (XSS) vulnerability in the Asset module&#39;s asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category.</p> <p>Cross-site scripting (XSS) vulnerability in the Asset module&#39;s asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26593 GHSA-q2rp-xfj8-r95h — Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category https://cve.radiocsirt.org/vuln/ghsa-q2rp-xfj8-r95h <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.asset.taglib, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in the Asset module&#39;s asset categories selector before 6.1.0 in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of an asset category.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.asset.taglib, Maven: com.liferay.portal:release.dxp.bom</p> <p>Cross-site scripting (XSS) vulnerability in the Asset module&#39;s asset categories selector before 6.1.0 in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of an asset category.</p> https://cve.radiocsirt.org/vuln/ghsa-q2rp-xfj8-r95h gsd-2022-26593 https://cve.radiocsirt.org/vuln/gsd-2022-26593 gsd-2022-26593 https://cve.radiocsirt.org/vuln/gsd-2022-26593