Description

A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4 before update 17 allows remote attackers to inject arbitrary web script or HTML.

Remediation

References

CVE-2022-42117

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43718)

phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15808)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.21)

WordPress Plugin Connections Business Directory Cross-Site Scripting (10.4.2)

MySQL CVE-2021-35642 Vulnerability (CVE-2021-35642)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2022-42117