Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.layout.taglib

2 known vulnerabilities.

2 results · Feed

  • Low 2.1

    Liferay Portal Reflected Cross-Site Scripting Vulnerability via Form Container

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.1 through 2024.Q2.13, 2024.Q1.1 through 2024…

  • Low 2.3

    Liferay Portal Vulnerable to Cross-Site Scripting

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.7 allows a remote authenticated attacker to inject JavaScript code via the content page's name field. This malicious payload is the…