Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities MongoDb Improper Certificate Validation Vulnerability (CVE-2024-1351) Oracle JRE CVE-2020-2593 Vulnerability (CVE-2020-2593) WordPress Plugin Users Ultra SQL Injection (1.4.35) Dolibarr Improper Authentication Vulnerability (CVE-2020-7995) ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9042) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-12646