Skip to content
OpenAdvisories

Archive

3 June 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2019-6588 Public exploit

    Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API

    In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:captcha url="<%= ur…