Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.120-ga120
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.120-ga120
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-22jp-w3cg-gvmm
Aliases:
CVE-2025-43740
Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature A Stored cross-site scripting vulnerability in the Liferay Portal … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-p9gc-59hf-x48p
Liferay Portal Vulnerable to Cross-Site Request Forgery Insufficient CSRF protection for omni-administrator users in Liferay Portal 7.0.0 through 7.4.3.119, and … CVE-2025-43748