XSS exists in Liferay Portal prior to 7.0 CE GA4 via a Knowledge Base article title.
liferay liferay portal