Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a bookmark URL. Remediation References CVE-2017-12648 Related Vulnerabilities Twisted Web HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-46137) WordPress Plugin To Top Security Bypass (2.2.2) WordPress Plugin Registrations for the Events Calendar-Event Registration Cross-Site Scripting (2.7.9) WordPress Plugin Page Builder by SiteOrigin Cross-Site Request Forgery (2.10.15) Contao Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-10642) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-12648