Description
A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.
Remediation
References
Related Vulnerabilities
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Security Bypass (1.3.6.4)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Security Bypass (5.4)
SharePoint Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1290)
PHP Other Vulnerability (CVE-2007-2511)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4301)