Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities WordPress Plugin Easy Event calendar Cross-Site Scripting (1.0) WordPress Plugin Forminator-Contact Form, Payment Form & Custom Form Builder Multiple Vulnerabilities (1.29.3) XWikiplatform Missing Authorization Vulnerability (CVE-2024-31997) Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24599) WordPress Plugin weForms-Easy Drag & Drop Contact Form Builder For WordPress Supply Chain Attack [Polyfill.io] (1.6.23) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities