Description
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the text field from a web content.
Remediation
References
Related Vulnerabilities
WordPress Plugin Learning Courses Privilege Escalation (4.7)
WordPress Plugin Scroll Baner Cross-Site Request Forgery (1.0)
WordPress Plugin PWAMP PHP Object Injection (1.0.0)
WordPress Plugin ImageLinks Interactive Image Builder for WordPress Cross-Site Scripting (1.5.2)
WordPress Plugin User Submitted Posts Cross-Site Scripting (20151113)