Description
Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder, or (2) App Builder module's object form view's form builder.
Remediation
References
Related Vulnerabilities
WordPress Plugin G Auto-Hyperlink SQL Injection (1.0.1)
WordPress Plugin SEO Backlinks Cross-Site Request Forgery (4.0.1)
WordPress 4.8.x PHP Object Injection (4.8 - 4.8.16)
WebLogic CVE-2023-21996 Vulnerability (CVE-2023-21996)
Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7503)