Description
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
Remediation
References
https://github.com/liferay/liferay-portal/commit/7e063aed70f947a92bb43a4471e0c4e650fe8f7f
Related Vulnerabilities
CVE-2022-39243 Vulnerability in maven package com.zaxxer:nuprocess
CVE-2023-36470 Vulnerability in maven package org.xwiki.platform:xwiki-platform-icon-script
CVE-2012-4387 Vulnerability in maven package org.apache.struts.xwork:xwork-core
CVE-2016-10735 Vulnerability in maven package org.wildfly.swarm:bootstrap