Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.plugins.admin.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2025-43769

    Liferay Portal vulnerable to Stored XSS in Components portlet

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute …

    Liferay DXP Portal com.liferay:com.liferay.plugins.admin.web Maven