Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-26269

Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via the anchor (hash) part of a URL.

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
com.liferay.portal / release.portal.bom 7.2.0 7.4.3.37.x
com.liferay.portal / release.dxp.bom 7.4.13.u1 7.4.13.u38
com.liferay.portal / release.dxp.bom 7.3.10.ep3 7.3.10.u11
com.liferay.portal / release.dxp.bom 7.2.0 7.2.10.fp20
liferay / liferay_portal 7.2.0 7.4.3.38
liferay / digital_experience_platform 7.2 7.2.x
liferay / digital_experience_platform 7.2-fix_pack_1 7.2-fix_pack_1.x
liferay / digital_experience_platform 7.2-fix_pack_2 7.2-fix_pack_2.x
liferay / digital_experience_platform 7.2-fix_pack_3 7.2-fix_pack_3.x
liferay / digital_experience_platform 7.2-fix_pack_5 7.2-fix_pack_5.x
liferay / digital_experience_platform 7.2-fix_pack_4 7.2-fix_pack_4.x
liferay / digital_experience_platform 7.2-fix_pack_6 7.2-fix_pack_6.x
liferay / digital_experience_platform 7.2-fix_pack_7 7.2-fix_pack_7.x
liferay / digital_experience_platform 7.2-fix_pack_8 7.2-fix_pack_8.x
liferay / digital_experience_platform 7.2-fix_pack_9 7.2-fix_pack_9.x
liferay / digital_experience_platform 7.2-fix_pack_11 7.2-fix_pack_11.x
liferay / digital_experience_platform 7.2-fix_pack_12 7.2-fix_pack_12.x
liferay / digital_experience_platform 7.2-fix_pack_13 7.2-fix_pack_13.x
liferay / digital_experience_platform 7.2-fix_pack_14 7.2-fix_pack_14.x
liferay / digital_experience_platform 7.2-fix_pack_15 7.2-fix_pack_15.x
liferay / digital_experience_platform 7.2-fix_pack_16 7.2-fix_pack_16.x
liferay / digital_experience_platform 7.3 7.3.x
liferay / digital_experience_platform 7.3-fix_pack_1 7.3-fix_pack_1.x
liferay / digital_experience_platform - 7.2
liferay / digital_experience_platform 7.2-fix_pack_10 7.2-fix_pack_10.x
liferay / digital_experience_platform 7.2-fix_pack_17 7.2-fix_pack_17.x
liferay / digital_experience_platform 7.2-fix_pack_18 7.2-fix_pack_18.x
liferay / digital_experience_platform 7.3-fix_pack_2 7.3-fix_pack_2.x
liferay / digital_experience_platform 7.4 7.4.x
liferay / digital_experience_platform 7.4-update1 7.4-update1.x
liferay / digital_experience_platform 7.4-update2 7.4-update2.x
liferay / digital_experience_platform 7.4-update3 7.4-update3.x
liferay / digital_experience_platform 7.4-update4 7.4-update4.x
liferay / digital_experience_platform 7.4-update5 7.4-update5.x
liferay / digital_experience_platform 7.4-update6 7.4-update6.x
liferay / digital_experience_platform 7.4-update7 7.4-update7.x
liferay / digital_experience_platform 7.4-update8 7.4-update8.x
liferay / digital_experience_platform 7.4-update9 7.4-update9.x
liferay / digital_experience_platform 7.4-update10 7.4-update10.x
liferay / digital_experience_platform 7.4-update11 7.4-update11.x
liferay / digital_experience_platform 7.4-update12 7.4-update12.x
liferay / digital_experience_platform 7.4-update13 7.4-update13.x
liferay / digital_experience_platform 7.4-update14 7.4-update14.x
liferay / digital_experience_platform 7.4-update15 7.4-update15.x
liferay / digital_experience_platform 7.4-update21 7.4-update21.x
liferay / digital_experience_platform 7.4-update34 7.4-update34.x
liferay / digital_experience_platform 7.4-update36 7.4-update36.x
liferay / digital_experience_platform 7.2-fix_pack_19 7.2-fix_pack_19.x
liferay / digital_experience_platform 7.2-service_pack_1 7.2-service_pack_1.x
liferay / digital_experience_platform 7.2-service_pack_2 7.2-service_pack_2.x
liferay / digital_experience_platform 7.2-service_pack_3 7.2-service_pack_3.x
liferay / digital_experience_platform 7.2-service_pack_4 7.2-service_pack_4.x
liferay / digital_experience_platform 7.2-service_pack_5 7.2-service_pack_5.x
liferay / digital_experience_platform 7.2-service_pack_6 7.2-service_pack_6.x
liferay / digital_experience_platform 7.2-service_pack_7 7.2-service_pack_7.x
liferay / digital_experience_platform 7.3-service_pack_1 7.3-service_pack_1.x
liferay / digital_experience_platform 7.3-service_pack_3 7.3-service_pack_3.x
liferay / digital_experience_platform 7.3-update4 7.3-update4.x
liferay / digital_experience_platform 7.3-update5 7.3-update5.x
liferay / digital_experience_platform 7.3-update6 7.3-update6.x
liferay / digital_experience_platform 7.3-update7 7.3-update7.x
liferay / digital_experience_platform 7.3-update8 7.3-update8.x
liferay / digital_experience_platform 7.3-update9 7.3-update9.x
liferay / digital_experience_platform 7.3-update10 7.3-update10.x
liferay / digital_experience_platform 7.4-update16 7.4-update16.x
liferay / digital_experience_platform 7.4-update17 7.4-update17.x
liferay / digital_experience_platform 7.4-update18 7.4-update18.x
liferay / digital_experience_platform 7.4-update19 7.4-update19.x
liferay / digital_experience_platform 7.4-update20 7.4-update20.x
liferay / digital_experience_platform 7.4-update22 7.4-update22.x
liferay / digital_experience_platform 7.4-update23 7.4-update23.x
liferay / digital_experience_platform 7.4-update24 7.4-update24.x
liferay / digital_experience_platform 7.4-update25 7.4-update25.x
liferay / digital_experience_platform 7.4-update26 7.4-update26.x
liferay / digital_experience_platform 7.4-update27 7.4-update27.x
liferay / digital_experience_platform 7.4-update28 7.4-update28.x
liferay / digital_experience_platform 7.4-update29 7.4-update29.x
liferay / digital_experience_platform 7.4-update30 7.4-update30.x
liferay / digital_experience_platform 7.4-update31 7.4-update31.x
liferay / digital_experience_platform 7.4-update32 7.4-update32.x
liferay / digital_experience_platform 7.4-update33 7.4-update33.x
liferay / digital_experience_platform 7.4-update35 7.4-update35.x
liferay / digital_experience_platform 7.4-update37 7.4-update37.x