Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.expando.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.1
    CVE-2025-43738

    Liferay Portal Reflected Cross-Site Scripting Vulnerability in displayType Parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2…

    Liferay DXP Portal com.liferay:com.liferay.expando.web Maven