com.liferay:com.liferay.frontend.editor.ckeditor.web

3 results · Feed

• Medium 5.1
  CVE-2025-43783

  Liferay Portal is vulnerable to Reflected XSS attack through get_editor path

  Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 update 73 through update 92 allows remote attackers t…

  Liferay DXP Portal com.liferay:com.liferay.frontend.editor.ckeditor.web Maven
  Sep 10, 2025
• Medium 6.9
  CVE-2025-43761

  Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint

  A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.4, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

  Liferay DXP Portal com.liferay:com.liferay.frontend.editor.ckeditor.web npm Maven
  Aug 22, 2025
• Medium 6.1
  CVE-2022-42116

  Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module

  A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through 7.4.3.14, and Liferay DXP 7.3 before update 6, and 7.4 before update 15 allows remote attackers to inject arbitrary web script…

  com.liferay.portal:release.dxp.bom com.liferay:com.liferay.frontend.editor.ckeditor.web Maven
  Oct 18, 2022