https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:47:12 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0918 certfr-2025-avi-0918 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0918 https://cve.radiocsirt.org/vuln/euvd-2026-256740 EUVD-2026-256740 https://cve.radiocsirt.org/vuln/euvd-2026-256740 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62255 <p>Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an attachment&#39;s filename.</p> <p>Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an attachment&#39;s filename.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62255 https://cve.radiocsirt.org/vuln/ghsa-gccf-r9xp-x8jx <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.knowledge.base.web</p> <p>Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an attachment&#39;s filename.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.knowledge.base.web</p> <p>Self Cross-site scripting (XSS) vulnerability on the edit Knowledge Base article page in Liferay Portal 7.4.0 through 7.4.3.101, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an attachment&#39;s filename.</p> https://cve.radiocsirt.org/vuln/ghsa-gccf-r9xp-x8jx https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2397 <p>Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Denial of Service Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2397