Package · Maven

com.liferay:com.liferay.journal.content.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2022-26596

Liferay Portal and Liferay DXP allows arbitrary injection via web content template names

Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.1.0 through 7.3.3, and Liferay DXP 7.0 before fix pack 94, 7.1 before fix pack 19, and 7.2 before fix pack 8, allows remote attackers to in…

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.journal.content.web Maven

Apr 25, 2022