Description
In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.
Remediation
References
Related Vulnerabilities
MySQL CVE-2018-3079 Vulnerability (CVE-2018-3079)
WordPress Plugin Simple Share Buttons Adder Cross-Site Scripting (5.6)
WordPress Plugin WordPress Books Gallery Unspecified Vulnerability (4.4.1)
WordPress Plugin Event List SQL Injection (0.7.8)
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1.4)