Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via an invalid portletId. Remediation References CVE-2017-12645 Related Vulnerabilities Artifactory Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-42509) WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0) WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.15) WordPress Plugin SupportEzzy Ticket System Cross-Site Scripting (1.2.5) WordPress Plugin GeoDirectory-WordPress Business Directory and Classified Ads Listings SQL Injection (2.2.23) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-12645