CVE-2021-38264

Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script…

published March 2, 2022

CVSS
—
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter. This issue is caused by an incomplete fix in CVE-2021-35463.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00728 · 53.7th percentile
Published
2022-03-02T23:06Z
EPSS history
Timeline
  • 02 MAR 23:06Z
    Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject arbitrary web script…
    cvelistv5