Description

XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address.

Remediation

References

CVE-2017-12646

Related Vulnerabilities

WordPress Plugin Premmerce Wholesale Pricing for WooCommerce Security Bypass (1.1.3)

Python Unchecked Return Value Vulnerability (CVE-2021-4189)

WordPress Plugin Smart Manager for WooCommerce & WpeC Multiple Unspecified Vulnerabilities (3.9.13)

WordPress Plugin Easy Testimonials Cross-Site Scripting (3.0.4)

WordPress Plugin Uploadify Remote File Upload (1.0)

Severity

Medium

Classification

CVE-2017-12646 CWE-707

Tags

Missing Update Known Vulnerabilities