Package · Maven

com.liferay.commerce:com.liferay.commerce.catalog.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.4

CVE-2022-42119

Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

com.liferay.portal:release.dxp.bom com.liferay.commerce:com.liferay.commerce.catalog.web Maven

Nov 15, 2022