Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 159
Reset filtersLiferay Portal and Liferay DXP Fails to Sanitize API Data
Liferay Portal Vulnerable to Persistent Cross-Site Scripting (XSS) in MyAccountPortlet
Liferay Portal Allows RCE via Deserialization of a JSON Payload
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
Liferay Portal XSS Vulnerability
Liferay Portal XSS Vulnerability
Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display
Liferay Portal Vulnerable to XSS via an Invalid portletId
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
Liferay Portal XSS vulnerability via movie parameter in the /html/portal/flash.jsp page
Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page
Open Redirect in Liferay Portal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.