Description
Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text field.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1484)
Oracle Application Server Other Vulnerability (CVE-2002-0842)
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.26)
SharePoint CVE-2020-1295 Vulnerability (CVE-2020-1295)
WordPress Plugin ThemeGrill Demo Importer Security Bypass (1.6.1)