Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-16147 - Vulnerability Database

Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2019-16147

Medium

Reference: CVE-2019-16147

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-16147

Title: Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.