Package · Maven

com.liferay:com.liferay.fragment.renderer.collection.filter.impl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2022-28980

Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.fragment.renderer.collection.filter.impl Maven

Sep 22, 2022