Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a Knowledge Base article title. Remediation References CVE-2017-12647 Related Vulnerabilities Envoy Proxy CVE-2024-23324 Vulnerability (CVE-2024-23324) Vanilla Forums Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2018-15833) WordPress Plugin Kama Click Counter SQL Injection (3.4.9) Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-25147) Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-3758) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-12647