Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:34:37 +0000 CVE-2024-26269 https://cve.radiocsirt.org/vuln/cve-2024-26269 <p><strong>Affected:</strong> Liferay Portal, Liferay DXP</p> <p>Cross-site scripting (XSS) vulnerability in the Frontend JS module&#39;s portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via the anchor (hash) part of a URL.</p> <p><strong>Affected:</strong> Liferay Portal, Liferay DXP</p> <p>Cross-site scripting (XSS) vulnerability in the Frontend JS module&#39;s portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via the anchor (hash) part of a URL.</p> https://cve.radiocsirt.org/vuln/cve-2024-26269