Description
In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.
Remediation
References
https://cxsecurity.com/issue/WLB-2017120169
Related Vulnerabilities
CVE-2021-23411 Vulnerability in npm package anchorme
CVE-2022-25893 Vulnerability in npm package vm2
CVE-2022-24891 Vulnerability in maven package org.owasp.esapi:esapi
CVE-2020-28052 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts