Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.portal.workflow.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2025-43776

    Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven