Unscored CVE-2009-3742 EUVD-2009-3714GHSA-2775-52x6-3w7f

Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web script or HTML via …

Published Jan 7, 2010 · Updated Sep 16, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in Liferay Portal before 5.3.0 allows remote attackers to inject arbitrary web script or HTML via the p_p_id parameter.

References

http://issues.liferay.com/browse/LPS-6034
VU#750796 third-party-advisory