Количество 2
Количество 2
CVE-2025-43781
Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portlet
GHSA-x5fw-8xgx-q6c9
Liferay Portal is vulnerable to XSS attack through its search bar portlet
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-43781 Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script or HTML via the URL in search bar portlet | CVSS3: 6.1 | 0% Низкий | 5 месяцев назад |
| GHSA-x5fw-8xgx-q6c9 Liferay Portal is vulnerable to XSS attack through its search bar portlet | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу