Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.calendar.web@5.0.46
purl pkg:maven/com.liferay/com.liferay.calendar.web@5.0.46
Next non-vulnerable version 5.0.88
Latest non-vulnerable version 5.0.88
Risk score 2.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-5264-m964-7pg9
Aliases:
CVE-2025-62240
Liferay Portal is vulnerable to XSS through its Calendar Events parameters Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in …
5.0.88
Not vulnerable
GHSA-gj92-p9mh-83j8
Aliases:
CVE-2025-43818
Liferay Portal vulnerable to cross-site scripting in the Calendar widget Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay …
5.0.87
Vulnerable
GHSA-pf86-4w35-cj89
Aliases:
CVE-2025-43820
Liferay Portal vulnerable to cross-site scripting in the Calendar widget Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when …
5.0.88
Not vulnerable
5.0.88
Not vulnerable
This package is not known to fix any advisories.