[LPE-863] Malicious JavaScript can be inserted into the Shopping portlet - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Critical
Resolution: Fixed
Affects Version/s: 5.1 EE SP1 (5.1.4)
Fix Version/s: 5.1 EE SP2 (5.1.5)
Component/s: Application Security, Util > Shopping
Labels:
None
Environment:
All

Description

Several cross site scripting (XSS) vulnerability exist in the Shopping portlet which may allow an attacker to insert malicious JavaScript into a page.

Attachments

Issue Links

is related to

LPS-3220 XSS vulnerability in Shopping portlet

Closed

Activity

People

Assignee:: EE Support

Reporter:: Samuel Kong

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 05/May/09 10:17 AM

Updated:: 09/Dec/16 12:32 PM

Resolved:: 06/May/09 10:45 AM

Packages

Version	Package
5.1 EE SP2 (5.1.5)