Stored XSS in comments

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 6.2 EE GA1 (6.2.10)
• Fix Version/s: 6.2.X EE
• Component/s: Security Vulnerability, Social Networking > Page Comments
• Labels:
  • 62-ee-sp19
  • liferay-fixpack-portal-140-6210
  • lsv
  • lsv-305
  • sev-3

A stored cross-site scripting (XSS) vulnerability exist with comments. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page.