Description

A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3 before update 6, and 7.4 before update 17 allows remote attackers to inject arbitrary web script or HTML.

Remediation

References

CVE-2022-42117

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5111)

WordPress Plugin Ultimate Appointment Booking & Scheduling Unspecified Vulnerability (1.1.10)

WordPress Plugin Intuitive Custom Post Order Multiple Vulnerabilities (3.1.3)

WordPress Plugin SEO SearchTerms Tagging 2 Multiple Vulnerabilities (1.535)

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Arbitrary File Upload (1.06.02)

Severity

Medium

Classification

CVE-2022-42117 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities