Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a bookmark URL. Remediation References CVE-2017-12648 Related Vulnerabilities Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-5322) WordPress 3.1.3 Multiple SQL Injection Vulnerabilities (3.1 - 3.1.3) Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13094) WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4047) Liferay Portal Excessive Iteration Vulnerability (CVE-2024-25144) Severity Medium Classification CVE-2017-12648 CWE-707 Tags Missing Update Known Vulnerabilities