Vulnerability Database

313,495

Total vulnerabilities in the database

CVE-2025-62240

Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle Name or (3) Last Name text field.

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
Maven icon com.liferay / com.liferay.calendar.web 5.0.45 5.0.88
liferay / digital_experience_platform 2023.Q3.1 2023.q3.8
liferay / digital_experience_platform 2023.q4.0 2023.q4.6
liferay / digital_experience_platform 7.3-update25 7.3-update25.x
liferay / digital_experience_platform 7.3-update26 7.3-update26.x
liferay / digital_experience_platform 7.3-update27 7.3-update27.x
liferay / digital_experience_platform 7.3-update28 7.3-update28.x
liferay / digital_experience_platform 7.3-update29 7.3-update29.x
liferay / digital_experience_platform 7.3-update30 7.3-update30.x
liferay / digital_experience_platform 7.3-update31 7.3-update31.x
liferay / digital_experience_platform 7.3-update32 7.3-update32.x
liferay / digital_experience_platform 7.3-update33 7.3-update33.x
liferay / digital_experience_platform 7.3-update34 7.3-update34.x
liferay / digital_experience_platform 7.3-update35 7.3-update35.x
liferay / digital_experience_platform 7.3-update36 7.3-update36.x
liferay / digital_experience_platform 7.4-update35 7.4-update35.x
liferay / digital_experience_platform 7.4-update36 7.4-update36.x
liferay / digital_experience_platform 7.4-update37 7.4-update37.x
liferay / digital_experience_platform 7.4-update38 7.4-update38.x
liferay / digital_experience_platform 7.4-update39 7.4-update39.x
liferay / digital_experience_platform 7.4-update40 7.4-update40.x
liferay / digital_experience_platform 7.4-update41 7.4-update41.x
liferay / digital_experience_platform 7.4-update42 7.4-update42.x
liferay / digital_experience_platform 7.4-update43 7.4-update43.x
liferay / digital_experience_platform 7.4-update44 7.4-update44.x
liferay / digital_experience_platform 7.4-update45 7.4-update45.x
liferay / digital_experience_platform 7.4-update46 7.4-update46.x
liferay / digital_experience_platform 7.4-update47 7.4-update47.x
liferay / digital_experience_platform 7.4-update48 7.4-update48.x
liferay / digital_experience_platform 7.4-update49 7.4-update49.x
liferay / digital_experience_platform 7.4-update50 7.4-update50.x
liferay / digital_experience_platform 7.4-update51 7.4-update51.x
liferay / digital_experience_platform 7.4-update52 7.4-update52.x
liferay / digital_experience_platform 7.4-update53 7.4-update53.x
liferay / digital_experience_platform 7.4-update54 7.4-update54.x
liferay / digital_experience_platform 7.4-update55 7.4-update55.x
liferay / digital_experience_platform 7.4-update56 7.4-update56.x
liferay / digital_experience_platform 7.4-update57 7.4-update57.x
liferay / digital_experience_platform 7.4-update58 7.4-update58.x
liferay / digital_experience_platform 7.4-update59 7.4-update59.x
liferay / digital_experience_platform 7.4-update60 7.4-update60.x
liferay / digital_experience_platform 7.4-update61 7.4-update61.x
liferay / digital_experience_platform 7.4-update62 7.4-update62.x
liferay / digital_experience_platform 7.4-update63 7.4-update63.x
liferay / digital_experience_platform 7.4-update64 7.4-update64.x
liferay / digital_experience_platform 7.4-update65 7.4-update65.x
liferay / digital_experience_platform 7.4-update66 7.4-update66.x
liferay / digital_experience_platform 7.4-update67 7.4-update67.x
liferay / digital_experience_platform 7.4-update68 7.4-update68.x
liferay / digital_experience_platform 7.4-update69 7.4-update69.x
liferay / digital_experience_platform 7.4-update70 7.4-update70.x
liferay / digital_experience_platform 7.4-update71 7.4-update71.x
liferay / digital_experience_platform 7.4-update72 7.4-update72.x
liferay / digital_experience_platform 7.4-update73 7.4-update73.x
liferay / digital_experience_platform 7.4-update74 7.4-update74.x
liferay / digital_experience_platform 7.4-update75 7.4-update75.x
liferay / digital_experience_platform 7.4-update76 7.4-update76.x
liferay / digital_experience_platform 7.4-update77 7.4-update77.x
liferay / digital_experience_platform 7.4-update78 7.4-update78.x
liferay / digital_experience_platform 7.4-update79 7.4-update79.x
liferay / digital_experience_platform 7.4-update8 7.4-update8.x
liferay / digital_experience_platform 7.4-update80 7.4-update80.x
liferay / digital_experience_platform 7.4-update81 7.4-update81.x
liferay / digital_experience_platform 7.4-update82 7.4-update82.x
liferay / digital_experience_platform 7.4-update83 7.4-update83.x
liferay / digital_experience_platform 7.4-update84 7.4-update84.x
liferay / digital_experience_platform 7.4-update85 7.4-update85.x
liferay / digital_experience_platform 7.4-update86 7.4-update86.x
liferay / digital_experience_platform 7.4-update87 7.4-update87.x
liferay / digital_experience_platform 7.4-update88 7.4-update88.x
liferay / digital_experience_platform 7.4-update89 7.4-update89.x
liferay / digital_experience_platform 7.4-update90 7.4-update90.x
liferay / digital_experience_platform 7.4-update91 7.4-update91.x
liferay / digital_experience_platform 7.4-update92 7.4-update92.x
liferay / liferay_portal 7.4.3.35 7.4.3.112