CVE-2025-62238
- EPSS 0.19%
- Veröffentlicht 10.10.2025 12:33:36
- Zuletzt bearbeitet 14.10.2025 19:36:59
Stored cross-site scripting (XSS) vulnerability on the Membership page in Account Settings in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 all...
CVE-2025-62239
- EPSS 0.2%
- Veröffentlicht 10.10.2025 12:21:53
- Zuletzt bearbeitet 14.10.2025 19:36:59
Cross-site scripting (XSS) vulnerability in workflow process builder in Liferay Portal 7.4.3.21 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 21 through update 92 allows remote authenticat...
CVE-2025-62240
- EPSS 0.19%
- Veröffentlicht 09.10.2025 21:15:40
- Zuletzt bearbeitet 14.10.2025 19:37:28
Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 throug...
CVE-2025-43771
- EPSS 0.19%
- Veröffentlicht 08.10.2025 14:13:40
- Zuletzt bearbeitet 08.10.2025 19:38:09
Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5 and 2023.Q3.1 through 2023.Q3.10 allow remote attackers to inject arbitrary web...
CVE-2025-43829
- EPSS 0.19%
- Veröffentlicht 08.10.2025 13:55:53
- Zuletzt bearbeitet 08.10.2025 19:38:09
Stored cross-site scripting (XSS) vulnerability in diagram type products in Commerce in Liferay Portal 7.4.3.18 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 18 through update 92 allows re...
CVE-2025-43830
- EPSS 0.22%
- Veröffentlicht 08.10.2025 13:11:37
- Zuletzt bearbeitet 08.10.2025 19:38:09
Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attacke...
CVE-2025-43821
- EPSS 0.19%
- Veröffentlicht 08.10.2025 12:53:20
- Zuletzt bearbeitet 08.10.2025 19:38:09
Cross-site scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote a...
CVE-2025-43822
- EPSS 0.19%
- Veröffentlicht 07.10.2025 22:16:03
- Zuletzt bearbeitet 08.10.2025 19:38:09
Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject ar...
CVE-2025-43823
- EPSS 0.19%
- Veröffentlicht 07.10.2025 21:54:54
- Zuletzt bearbeitet 08.10.2025 19:38:09
Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject ar...
CVE-2025-43824
- EPSS 0.21%
- Veröffentlicht 06.10.2025 22:15:37
- Zuletzt bearbeitet 08.10.2025 19:38:32
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the...