Skip to content
OpenAdvisories

Package · Maven

com.liferay.commerce:com.liferay.commerce.address.content.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.6
    CVE-2023-42627

    Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module

    Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 through 7.4.3.91, and Liferay DXP 7.3 update 33 and earlier, and 7.4 before update 92 allow remote attackers to inject arbitrary web script or HTML via a…

    Liferay DXP Portal com.liferay.portal:release.dxp.bom Maven