| Package | Affected versions | Patched versions |
|---|---|---|
| com.liferay.portal:release.dxp.bom | ≤ 7.3 | |
| com.liferay:com.liferay.layout.admin.web | < 5.0.0 | 5.0.0 |
| digital experience platform | ≤ 7.3 | |
| liferay portal | ≥ 7.3.4, ≤ 7.3.6 |
Liferay Layout Admin Web before 5.0.0 in Liferay Portal v7.3.6 and below and Liferay DXP v7.3 and below were discovered to contain a cross-site scripting (XSS) vulnerability via the _com_liferay_asset_list_web_portlet_AssetListPortlet_title parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free