Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2011-1570 - Vulnerability Database

Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2011-1570

Low

Reference: CVE-2011-1570

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-1570

Title: Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA when Apache Tomcat is used allows remote authenticated users to inject arbitrary web script or HTML via a message title a different vulnerability than CVE-2004-2030.