[LPE-1100] Malicious JavaScript can be inserted into the Polls portlet - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 5.1 EE SP2 (5.1.5), 5.2 EE (5.2.4)
Fix Version/s: 5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
Component/s: Application Security, Polls
Labels:
None
Environment:
All

Description

A cross site scripting (XSS) vulnerability exist in the Polls portlet which may allow an attacker to insert malicious JavaScript into a page.

Attachments

Issue Links

is related to

LPS-3861 Polls results are not escaped

Closed

Activity

People

Assignee:: EE Support

Reporter:: Samuel Kong

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 30/Jun/09 7:55 PM

Updated:: 09/Dec/16 12:43 PM

Resolved:: 01/Jul/09 10:06 AM

Packages

Version	Package
5.1 EE SP3 (5.1.6)
5.2 EE SP1 (5.2.5)