CVE-2023-44309

CVSS V2 None CVSS V3 None
Description
Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into any non-HTML field of a linked source asset.
Overview
  • CVE ID
  • CVE-2023-44309
  • Assigner
  • Liferay
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-10-17T08:23:27.403Z
  • Last Modified Date
  • 2023-10-17T08:23:27.403Z
History
Created Old Value New Value Data Type Notes
2024-06-25 12:19:11 Added to TrackCVE