Количество 2
Количество 2
CVE-2025-43737
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 through 2025.Q1.15 allows a remote authenticated user to inject JavaScript code via _com_liferay_journal_web_portlet_JournalPortlet_backURL parameter.
GHSA-vjwr-cqwf-6q96
Liferay Portal Vulnerable to Cross-Site Scripting via backURL Paramter
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-43737 A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and 2025.Q1.0 through 2025.Q1.15 allows a remote authenticated user to inject JavaScript code via _com_liferay_journal_web_portlet_JournalPortlet_backURL parameter. | CVSS3: 5.4 | 0% Низкий | 6 месяцев назад |
| GHSA-vjwr-cqwf-6q96 Liferay Portal Vulnerable to Cross-Site Scripting via backURL Paramter | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу