Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.flags.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-43771

    Liferay Portal Notifications Widget has multiple XSS vulnerabilities through various text fields

    Multiple cross-site scripting (XSS) vulnerabilities in the Notifications widget in Liferay Portal 7.4.3.102 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5 and 2023.Q3.1 through 2023.Q3.10 allow remote attackers to inject arbitrary web script o…

    Liferay DXP Portal com.liferay:com.liferay.flags.web Maven