Description
A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag.
Remediation
References
Related Vulnerabilities
WordPress Plugin Donations Privilege Escalation (1.3)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.17)
WordPress Plugin LeagueManager Multiple SQL Injection Vulnerabilities (3.9.1.1)
WordPress Plugin Simple Events Calendar Multiple Vulnerabilities (1.3.5)
PostgreSQL Improper Input Validation Vulnerability (CVE-2019-10210)