Package · Maven

com.liferay:com.liferay.layout.seo.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2022-26597

Liferay Portal and Liferay DXP allows arbitrary injection via the site name

Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name.

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.layout.seo.web Maven

Apr 25, 2022