Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@7.0 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-w28v-87g6-cjr6
Aliases: CVE-2021-29049 |
Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter Cross-site scripting (XSS) vulnerability in the Portal Workflow module's … | There are no reported fixed by versions. |
|
GHSA-ffmm-5ww2-g3q4
Aliases: CVE-2021-38263 |
Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console Liferay Server Admin Web before 4.0.12 from … | There are no reported fixed by versions. |
|
GHSA-px38-239g-x5mg
Aliases: CVE-2023-37940 |
Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page Cross-site scripting (XSS) vulnerability in … |
Vulnerable |