| Package | Affected versions | Patched versions |
|---|---|---|
| com.liferay.portal:release.dxp.bom | ≤ 7.0 | |
| com.liferay:com.liferay.server.admin.web | < 4.0.12 | 4.0.12 |
| digital experience platform | = 7.0= 7.1= 7.2 | |
| liferay portal | ≤ 7.3.2 |
Liferay Server Admin Web before 4.0.12 from Liferay Portal v7.3.2 and below and Liferay DXP v7.0 and below were discovered to contain a cross-site scripting (XSS) vulnerability via the script console under the Server module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free