Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 22:06:07 +0000 certfr-2023-avi-0880 — Une vulnérabilité a été découverte dans les produits Liferay. Elle permet à un attaquant de provoquer une injection de… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0880 certfr-2023-avi-0880 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0880 EUVD-2026-163193 https://cve.radiocsirt.org/vuln/euvd-2026-163193 EUVD-2026-163193 https://cve.radiocsirt.org/vuln/euvd-2026-163193 fkie_cve-2023-42497 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42497 <p>Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.</p> <p>Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42497 GHSA-w2g3-j73q-7qv7 — Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page https://cve.radiocsirt.org/vuln/ghsa-w2g3-j73q-7qv7 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page before 2.0.86 from Liferay Portal (7.4.3.4 through 7.4.3.85), and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page before 2.0.86 from Liferay Portal (7.4.3.4 through 7.4.3.85), and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-w2g3-j73q-7qv7 gsd-2023-42497 https://cve.radiocsirt.org/vuln/gsd-2023-42497 gsd-2023-42497 https://cve.radiocsirt.org/vuln/gsd-2023-42497 WID-SEC-W-2023-2670 — Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670