Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-38263 - Vulnerability Database

Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-38263

Medium

Reference: CVE-2021-38263

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-38263

Title: Liferay Portal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Liferay Portal v7.3.2 and below and Liferay DXP v7.0 and below were discovered to contain a cross-site scripting (XSS) vulnerability via the script console under the Server module.