Lucene search
PRIOn knowledge basePRION:CVE-2023-33943HistoryMay 24, 2023 - 3:15 p.m.
Cross site scripting
2023-05-2415:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
remote attackers
arbitrary web script
html
crafted payload
user data
security vulnerability
liferay portal
liferay dxp
0.001 Low
EPSS
Percentile
22.8%
Cross-site scripting (XSS) vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle Name, (3) Last Name, or (4) Job Title text field.
Related
osv
osv
CVE-2023-33943
2023-05-24 15:15:09
Cross-site scripting in Liferay Portal
2023-05-24 15:30:27
BIT-liferay-2023-33943
2024-01-31 15:18:21
cve
cve
CVE-2023-33943
2023-05-24 15:15:09
nvd
nvd
CVE-2023-33943
2023-05-24 15:15:09
nessus
nessus
Liferay Portal 7.4.3.21 <= 7.4.3.62 XSS
2023-05-29 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2023-06-06 09:09:39
github
github
Cross-site scripting in Liferay Portal
2023-05-24 15:30:27
cvelist
cvelist
CVE-2023-33943
2023-05-24 14:57:46