CVE-2023-47797
Reflected cross-site scripting (XSS) vulnerability on a content page’s edit page in Liferay Portal 7.4.3.94 through 7.4.3.95 allows remote attackers to inject arbitrary web script or HTML via the p_l_back_url_title parameter.
| Software | From | Fixed in |
|---|---|---|
| liferay / liferay_portal | 7.4.3.94 | 7.4.3.95.x |
com.liferay.portal / release.portal.bom
|
7.4.3.94 | 7.4.3.96 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime