CVE-2022-26594

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to…

published April 15, 2022

CVSS
—
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder, or (2) App Builder module's object form view's form builder.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00728 · 53.7th percentile
Published
2022-04-15T15:50Z
EPSS history
Timeline
  • 15 APR 15:50Z
    Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to…
    cvelistv5