Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a bookmark URL. Remediation References CVE-2017-12648 Related Vulnerabilities WordPress Plugin FlightLog SQL Injection (3.0.2) Squid Out-of-bounds Write Vulnerability (CVE-2019-12519) WordPress Plugin Add Any Extension to Pages Cross-Site Scripting (1.3) WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (7.6.0) SharePoint CVE-2018-8628 Vulnerability (CVE-2018-8628) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-12648