Cross site scripting

2021-05-1615:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

47.1%

JSON

Cross-site scripting (XSS) vulnerability in the Asset module’s categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.

CPENameOperatorVersion
liferay_portaleq7.3.4

CPE	Name	Operator	Version
	liferay_portal	eq	7.3.4

References

liferay.com

portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120777766

0.001 Low

EPSS

Percentile

47.1%

JSON

Related for PRION:CVE-2021-29039