Description
Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to inject arbitrary web script or HTML via a crafted payload injected into a web content structure's Name text field
Remediation
References
Related Vulnerabilities
WordPress Plugin YOP Poll Cross-Site Scripting (6.3.2)
TYPO3 Incorrect Authorization Vulnerability (CVE-2025-47937)
WordPress Plugin WP-Recall-Registration, Profile, Commerce & More Cross-Site Scripting (16.24.47)
WordPress Plugin Sell Downloads Cross-Site Scripting (1.0.86)
Oracle Application Server Other Vulnerability (CVE-2002-1630)