Archive
3 June 2019
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Medium 4.7CVE-2019-6588 Public exploit
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:captcha url="<%= ur…