CVE-2008-0180

2008-02-0423:00:00

certcc

www.cve.org

cross-site scripting

liferay portal

user profile vulnerability

AI Score

5.3

Confidence

High

EPSS

0.003

Percentile

69.8%

JSON

Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile.

References

secunia.com/advisories/28742

support.liferay.com/browse/LEP-4738

www.kb.cert.org/vuls/id/732449

www.securityfocus.com/bid/27546