Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.layout.impl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.7
    CVE-2025-43759

    Liferay Portal users are able to add system admin portlets to pages

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.14 and 7.4 GA through update 92 allows admin users of a virtual instance to a…

    Liferay DXP Portal com.liferay:com.liferay.layout.impl Maven
  • Critical 9.0
    CVE-2023-44310

    Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu

    Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted pa…

    Liferay DXP Portal com.liferay.portal:release.dxp.bom Maven