Lucene search
Veracode Vulnerability DatabaseVERACODE:34510HistoryMar 04, 2022 - 11:41 a.m.
Cross-site Scripting (XSS)
2022-03-0411:41:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31
0.001 Low
EPSS
Percentile
29.2%
com.liferay:com.liferay.layout.admin.web is vulnerable to cross-site scripting. The library does not properly escape the COLLECTION_NAME parameter before it output to the front end, allowing an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| com.liferay.layout.admin.web | le | 4.0.80 | |
| com.liferay.layout.admin.web | le | 4.0.80 |
Related
cnvd
cnvd
prion
prion
Cross site scripting
2022-03-03 00:15:00
nvd
nvd
CVE-2021-38265
2022-03-03 00:15:08
osv
osv
BIT-liferay-2021-38265
2024-01-31 15:22:07
CVE-2021-38265
2022-03-03 00:15:08
cvelist
cvelist
CVE-2021-38265
2022-03-02 23:03:31
cve
cve
CVE-2021-38265
2022-03-03 00:15:08