Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities WordPress Plugin WooCommerce Cross-Site Scripting (2.6.8) WordPress Plugin WP Planet Cross-Site Scripting (0.1) Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-3325) WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Multiple Vulnerabilities (5.5.4) Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-43769) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities