Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via an invalid portletId. Remediation References CVE-2017-12645 Related Vulnerabilities WebLogic CVE-2020-2883 Vulnerability (CVE-2020-2883) Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58186) OpenSSL Out-of-bounds Write Vulnerability (CVE-2022-3602) MongoDb Use of Uninitialized Resource Vulnerability (CVE-2026-4147) MySQL CVE-2015-4904 Vulnerability (CVE-2015-4904) Severity Medium Classification CVE-2017-12645 CWE-707 Tags Missing Update Known Vulnerabilities