| Package | Affected versions | Patched versions |
|---|---|---|
| com.liferay.portal:release.portal.bom | < 7.0.3-GA4 | 7.0.3-GA4 |
| com.liferay:com.liferay.frontend.taglib | < 2.1.3 | 2.1.3 |
| liferay portal | ≤ 7.0 |
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free