Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.frontend.editor.ckeditor.web@2.0.7
purl pkg:maven/com.liferay/com.liferay.frontend.editor.ckeditor.web@2.0.7
Next non-vulnerable version 5.0.107
Latest non-vulnerable version 5.0.107
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-3h7r-4xxj-3mfm
Aliases:
CVE-2025-43761
Liferay Portal Reflected XSS in CKeditor 4.21.0 endpoint A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through …
5.0.107
Not vulnerable
GHSA-67jp-27jj-6x85
Aliases:
CVE-2022-42116
Liferay Portal and Liferay DXP Vulnerable to XSS in the CKEditor Integration with the Frontend Editor Module A Cross-site scripting …
5.0.46
Vulnerable
This package is not known to fix any advisories.