Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-5909) WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (2.0.2) phpList Other Vulnerability (CVE-2006-5524) Python Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-20907) Jenkins Other Vulnerability (CVE-2016-3726) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities