Uploaded image for project: 'PUBLIC - Liferay Portal Enterprise Edition'
  1. PUBLIC - Liferay Portal Enterprise Edition
  2. LPE-3208

XSS issue in the Navigation portlet

    XMLWordPrintable

    Details

      Description

      A cross site scripting (XSS) vulnerability exist with the page titles and URL in the Navigation portlet. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page.

        Attachments

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LPS-12272 Navigation portlet is vulnerable to XSS

          • Closed

            Activity

              People

              • Assignee:
                sophia.zhang Sophia Zhang
                Reporter:
                samuel.kong Samuel Kong
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Packages

                  Version Package
                  5.1 EE SP5 (5.1.8)
                  5.2 EE SP4 (5.2.8)
                  6.0 EE (6.0.10)