Skip to content
OpenAdvisories
Unscored CVE-2008-0180 EUVD-2008-0192GHSA-w6gr-v7vh-5878

Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to…

Published Feb 4, 2008 · Updated Sep 16, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile.

References