Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.frontend.taglib.clay@1.4.23
purl pkg:maven/com.liferay/com.liferay.frontend.taglib.clay@1.4.23
Next non-vulnerable version 15.2.2
Latest non-vulnerable version 15.2.2
Risk score 2.8
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-qgj5-4qvg-2f8c
Aliases:
CVE-2025-43774
Liferay Portal is vulnerable to XSS attack through its Style Book theme A reflected cross-site scripting (XSS) vulnerability in the …
15.2.1
Vulnerable
GHSA-g6r2-6x46-jpp6
Aliases:
CVE-2022-42117
Liferay Portal and Liferay DXP Vulnerable to XSS in the Frontend Taglib Module A Cross-site scripting (XSS) vulnerability in the …
9.1.7
Vulnerable
GHSA-9h7f-5hc8-cj5f
Aliases:
CVE-2021-35463
Liferay Portal cross-site scripting (XSS) vulnerability in the Frontend Taglib module Cross-site scripting (XSS) vulnerability in the Frontend Taglib module … There are no reported fixed by versions.
GHSA-9536-m86r-q297
Aliases:
CVE-2021-38264
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter Liferay Portal v7.4.1 and below was discovered to contain … There are no reported fixed by versions.
GHSA-m5c7-5gv3-hcpf
Aliases:
CVE-2025-43734
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in …
15.2.2
Not vulnerable
15.2.2
Not vulnerable
This package is not known to fix any advisories.