Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.layout.admin.web

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-62253

    Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter

    Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported vers…

    Liferay DXP Portal com.liferay:com.liferay.layout.admin.web Maven
  • Medium 5.1
    CVE-2025-43755

    Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 t through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.13, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 20…

    Liferay DXP Portal com.liferay:com.liferay.layout.admin.web Maven
  • Medium 5.4
    CVE-2021-38265

    Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)

    Cross-site scripting (XSS) vulnerability in the Asset module in Liferay Portal 7.3.4 through 7.3.6 allow remote attackers to inject arbitrary web script or HTML when creating a collection page via the _com_liferay_asset_list_web_portlet_AssetListPortlet_title…

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.layout.admin.web Maven