Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities MediaWiki CVE-2023-29137 Vulnerability (CVE-2023-29137) WordPress Plugin Store Locator Plus for WordPress Multiple Vulnerabilities (3.0.1) WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-6514) TCExam Missing Authorization Vulnerability (CVE-2023-6554) SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-1148) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities