~ / search / GHSA-m2gx-7pvx-3gvg

GHSA-m2gx-7pvx-3gvg

Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-16147

Packages

EcosystemPackageAffectedFixed in
Maven com.liferay:com.liferay.journal.taglib < 3.0.4 3.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to `journal_article/page.jsp` in `journal/journal-taglib`.

References

External links from the advisory. They lead to third-party sites.