liferay digital experience platform vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 up to and including 7.4.3.91, and Liferay DXP 7.3 update 33 and previous versions, and 7.4 before update 92 allow remote malicious users to inject arbitrary web script or HTM...

Liferay Digital Experience Platform 7.3 Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

5.4

CVSSv3

Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 up to and including 7.4.3.87, and Liferay DXP 7.0 fix pack 83 through 102, 7.1 fix pack 28 and previous versions, 7.2 fix pack 20 and previous versions, 7.3 update 33 and previous versions,...

Liferay Digital Experience Platform 7.2 Liferay Digital Experience Platform 7.1 Liferay Digital Experience Platform 7.0 Liferay Digital Experience Platform 7.3 Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

5.4

CVSSv3

Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 up to and including 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote malicious users to inject arbitrary web script or HTML via a crafted paylo...

Liferay Digital Experience Platform 7.1 Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

6.1

CVSSv3

Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 up to and including 7.4.3.89, and Liferay DXP 7.4 update 41 through update 89 allow remote malicious users to...

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

5.4

CVSSv3

Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 up to and including 7.4.3.87, and Liferay DXP 7.4 before update 88 allows remote malicious users to inject arbitrary web script or HTML via a crafted payload injected into a Voca...

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

5.4

CVSSv3

Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 up to and including 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote malicious users to inject arbitrary web script or HTML via a crafted payload injected into...

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

6.1

CVSSv3

Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 up to and including 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote malicious users to inject arbitrary web script or HTML via the `_com_liferay_translatio...

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

4.3

CVSSv3

The organization selector in Liferay Portal 7.4.3.81 up to and including 7.4.3.85, and Liferay DXP 7.4 update 81 through 85 does not check user permission, which allows remote authenticated users to obtain a list of all organizations.

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

7.5

CVSSv3

In Liferay Portal 7.3.0 and previous versions, and Liferay DXP 7.2 and previous versions the default configuration does not require users to verify their email address, which allows remote malicious users to create accounts using fake email addresses or email addresses which they...

Liferay Digital Experience Platform 7.2 Liferay Digital Experience Platform 7.1 Liferay Digital Experience Platform 7.0 Liferay Liferay Portal

7.5

CVSSv3

Pattern Redirects in Liferay Portal 7.4.3.48 up to and including 7.4.3.76, and Liferay DXP 7.4 update 48 through 76 allows regular expressions that are vulnerable to ReDoS attacks to be used as patterns, which allows remote malicious users to consume an excessive amount of server...

Liferay Digital Experience Platform 7.4 Liferay Liferay Portal

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook