Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title

MEDIO 6.1CVE-2019-16147 · GHSA-m2gx-7pvx-3gvg · Published 09/09/2019 · updated 17/06/2026

En resumen

CVE-2019-16147 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a com.liferay:com.liferay.journal.taglib, liferay portal (liferay).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.78%, mayor que el 56.1% de las vulnerabilidades.
Solución: actualizar a 3.0.4, 7.2.0 o posterior.

Package	Affected versions	Patched versions
com.liferay:com.liferay.journal.taglib Maven	`< 3.0.4`	`3.0.4`
liferay portal liferay	`= 7.2.0< 7.2.0`	`7.2.0`

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.

NVD description

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.