Lucene search
PRIOn knowledge basePRION:CVE-2023-33942HistoryMay 24, 2023 - 3:15 p.m.
Cross site scripting
2023-05-2415:15:00
PRIOn knowledge base
www.prio-n.com
8
cross-site scripting
web content display
liferay portal
remote attackers
arbitrary web script
html
crafted payload
0.001 Low
EPSS
Percentile
22.8%
Cross-site scripting (XSS) vulnerability in the Web Content Display widget’s article selector in Liferay Liferay Portal 7.4.3.50, and Liferay DXP 7.4 update 50 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a web content article’s Title field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| digital_experience_platform | eq | 7.4 update50 | |
| liferay_portal | eq | 7.4.3.50 |
Related
osv
osv
CVE-2023-33942
2023-05-24 15:15:09
Cross-site scripting in Liferay Portal
2023-05-24 15:30:27
BIT-liferay-2023-33942
2024-01-31 15:18:30
veracode
veracode
Cross-Site Scripting (XSS)
2023-06-06 08:28:38
github
github
Cross-site scripting in Liferay Portal
2023-05-24 15:30:27
cve
cve
CVE-2023-33942
2023-05-24 15:15:09
cvelist
cvelist
CVE-2023-33942
2023-05-24 14:49:17
nessus
nessus
Liferay Portal 7.4.3.50 < 7.4.3.51 XSS
2023-05-29 00:00:00
nvd
nvd
CVE-2023-33942
2023-05-24 15:15:09