Vulnerability Database

313,495

Total vulnerabilities in the database

CVE-2025-43822

Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 update 15 through update 92 allow remote attackers to inject arbitrary web script or HTML via crafted payload injected into a Terms and Condition's Name text field to (1) Payment Terms, or (2) the Delivery Term on the view order page.

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
Maven icon com.liferay.portal / release.portal.bom 7.4.3.15 7.4.3.112-ga112
liferay / digital_experience_platform 2023.q3.1 2023.q3.9
liferay / digital_experience_platform 2023.q4.0 2023.q4.6
liferay / digital_experience_platform 7.4-update15 7.4-update15.x
liferay / digital_experience_platform 7.4-update16 7.4-update16.x
liferay / digital_experience_platform 7.4-update17 7.4-update17.x
liferay / digital_experience_platform 7.4-update18 7.4-update18.x
liferay / digital_experience_platform 7.4-update19 7.4-update19.x
liferay / digital_experience_platform 7.4-update20 7.4-update20.x
liferay / digital_experience_platform 7.4-update21 7.4-update21.x
liferay / digital_experience_platform 7.4-update22 7.4-update22.x
liferay / digital_experience_platform 7.4-update23 7.4-update23.x
liferay / digital_experience_platform 7.4-update24 7.4-update24.x
liferay / digital_experience_platform 7.4-update25 7.4-update25.x
liferay / digital_experience_platform 7.4-update26 7.4-update26.x
liferay / digital_experience_platform 7.4-update27 7.4-update27.x
liferay / digital_experience_platform 7.4-update28 7.4-update28.x
liferay / digital_experience_platform 7.4-update29 7.4-update29.x
liferay / digital_experience_platform 7.4-update30 7.4-update30.x
liferay / digital_experience_platform 7.4-update31 7.4-update31.x
liferay / digital_experience_platform 7.4-update32 7.4-update32.x
liferay / digital_experience_platform 7.4-update33 7.4-update33.x
liferay / digital_experience_platform 7.4-update34 7.4-update34.x
liferay / digital_experience_platform 7.4-update35 7.4-update35.x
liferay / digital_experience_platform 7.4-update36 7.4-update36.x
liferay / digital_experience_platform 7.4-update37 7.4-update37.x
liferay / digital_experience_platform 7.4-update38 7.4-update38.x
liferay / digital_experience_platform 7.4-update39 7.4-update39.x
liferay / digital_experience_platform 7.4-update40 7.4-update40.x
liferay / digital_experience_platform 7.4-update41 7.4-update41.x
liferay / digital_experience_platform 7.4-update42 7.4-update42.x
liferay / digital_experience_platform 7.4-update43 7.4-update43.x
liferay / digital_experience_platform 7.4-update44 7.4-update44.x
liferay / digital_experience_platform 7.4-update45 7.4-update45.x
liferay / digital_experience_platform 7.4-update46 7.4-update46.x
liferay / digital_experience_platform 7.4-update47 7.4-update47.x
liferay / digital_experience_platform 7.4-update48 7.4-update48.x
liferay / digital_experience_platform 7.4-update49 7.4-update49.x
liferay / digital_experience_platform 7.4-update50 7.4-update50.x
liferay / digital_experience_platform 7.4-update51 7.4-update51.x
liferay / digital_experience_platform 7.4-update52 7.4-update52.x
liferay / digital_experience_platform 7.4-update53 7.4-update53.x
liferay / digital_experience_platform 7.4-update54 7.4-update54.x
liferay / digital_experience_platform 7.4-update55 7.4-update55.x
liferay / digital_experience_platform 7.4-update56 7.4-update56.x
liferay / digital_experience_platform 7.4-update57 7.4-update57.x
liferay / digital_experience_platform 7.4-update58 7.4-update58.x
liferay / digital_experience_platform 7.4-update59 7.4-update59.x
liferay / digital_experience_platform 7.4-update60 7.4-update60.x
liferay / digital_experience_platform 7.4-update61 7.4-update61.x
liferay / digital_experience_platform 7.4-update62 7.4-update62.x
liferay / digital_experience_platform 7.4-update63 7.4-update63.x
liferay / digital_experience_platform 7.4-update64 7.4-update64.x
liferay / digital_experience_platform 7.4-update65 7.4-update65.x
liferay / digital_experience_platform 7.4-update66 7.4-update66.x
liferay / digital_experience_platform 7.4-update67 7.4-update67.x
liferay / digital_experience_platform 7.4-update68 7.4-update68.x
liferay / digital_experience_platform 7.4-update69 7.4-update69.x
liferay / digital_experience_platform 7.4-update70 7.4-update70.x
liferay / digital_experience_platform 7.4-update71 7.4-update71.x
liferay / digital_experience_platform 7.4-update72 7.4-update72.x
liferay / digital_experience_platform 7.4-update73 7.4-update73.x
liferay / digital_experience_platform 7.4-update74 7.4-update74.x
liferay / digital_experience_platform 7.4-update75 7.4-update75.x
liferay / digital_experience_platform 7.4-update76 7.4-update76.x
liferay / digital_experience_platform 7.4-update77 7.4-update77.x
liferay / digital_experience_platform 7.4-update78 7.4-update78.x
liferay / digital_experience_platform 7.4-update79 7.4-update79.x
liferay / digital_experience_platform 7.4-update80 7.4-update80.x
liferay / digital_experience_platform 7.4-update81 7.4-update81.x
liferay / digital_experience_platform 7.4-update82 7.4-update82.x
liferay / digital_experience_platform 7.4-update83 7.4-update83.x
liferay / digital_experience_platform 7.4-update84 7.4-update84.x
liferay / digital_experience_platform 7.4-update85 7.4-update85.x
liferay / digital_experience_platform 7.4-update86 7.4-update86.x
liferay / digital_experience_platform 7.4-update87 7.4-update87.x
liferay / digital_experience_platform 7.4-update88 7.4-update88.x
liferay / digital_experience_platform 7.4-update89 7.4-update89.x
liferay / digital_experience_platform 7.4-update90 7.4-update90.x
liferay / digital_experience_platform 7.4-update91 7.4-update91.x
liferay / digital_experience_platform 7.4-update92 7.4-update92.x
liferay / liferay_portal 7.4.3.15 7.4.3.112