Description
Cross-site scripting (XSS) vulnerability in HtmlUtil.escapeJsLink in Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via crafted javascript: style links.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-4767 Vulnerability (CVE-2015-4767)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-28333)
WordPress Plugin WP-Print Cross-Site Request Forgery (2.51)
WordPress Plugin FavIcon Switcher Cross-Site Request Forgery (1.2.11)
WordPress Cross-Site Scripting Vulnerability (0.70 - 3.7.11)