Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

LSV-748: XSS with the title of a modal window

Affects versions

Fix versions

7.0 Fix Pack Version

96

7.1 Fix Pack Version

20

7.2 Fix Pack Version

9

7.3 Fix Pack Version

None

7.4 Fix Pack Version

None

CVE IDs

CVSS Base Score

CVSS Vector String

Labels

Description

Cross-site scripting (XSS) vulnerability in the Frontend JS module in Liferay DXP 7.0, 7.1 and 7.2 allows remote attackers to inject arbitrary web script or HTML via the title of a modal window.

Activity

Show:
Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Priority

Components

Zendesk Support

Created September 11, 2020 at 4:25 AM
Updated August 2, 2021 at 12:00 AM
Resolved November 6, 2020 at 5:32 AM