Description
Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form with a rich text type field.
Remediation
References
Related Vulnerabilities
Ruby Other Vulnerability (CVE-2016-2337)
WordPress Plugin Connections Business Directory Unspecified Vulnerability (0.7.1.5)
WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)
Oracle JRE CVE-2012-0504 Vulnerability (CVE-2012-0504)
WordPress Improper Input Validation Vulnerability (CVE-2011-4957)