Description
In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.
Remediation
References
https://cxsecurity.com/issue/WLB-2017120169
Related Vulnerabilities
CVE-2023-36665 Vulnerability in maven package org.webjars.npm:github-com-protobufjs-protobuf-js
CVE-2020-11620 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2023-24162 Vulnerability in maven package cn.hutool:hutool-all
CVE-2014-0168 Vulnerability in maven package org.jolokia:jolokia-core
CVE-2021-32859 Vulnerability in maven package org.webjars.npm:github-com-baremetrics-calendar