Description
A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.
Remediation
References
Related Vulnerabilities
WebLogic CVE-2020-14557 Vulnerability (CVE-2020-14557)
WordPress Plugin DethemeKit For Elementor Multiple Cross-Site Scripting Vulnerabilities (1.5.5.4)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2023-39456)
Serendipity Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1916)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.9)