Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (3.4.12) Apache HTTP Server CVE-2018-11763 Vulnerability (CVE-2018-11763) WordPress Plugin ShareThis Dashboard for Google Analytics Cross-Site Scripting (2.5.1) MySQL CVE-2017-3456 Vulnerability (CVE-2017-3456) WordPress Plugin WP Humans.txt Cross-Site Scripting (1.0.6) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities