Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a bookmark URL. Remediation References CVE-2017-12648 Related Vulnerabilities WordPress Ultimate Member Plugin Other Vulnerability (CVE-2022-3383) Drupal Core 4.7.x Security Bypass (4.7.0 - 4.7.7) WordPress Plugin Click to Copy Grab Box Multiple Cross-Site Scripting Vulnerabilities (0.1.1) ownCloud Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-23948) Lighttpd Other Vulnerability (CVE-2007-3947) Severity Medium Classification CVE-2017-12648 CWE-707 Tags Missing Update Known Vulnerabilities