Details

    • Branch Version/s:
      6.0.x, 5.2.x
    • Backported to Branch:
      Committed

      Description

      XSS issues in Polls portlet.

      Steps to reproduced the issues:

      1. Start liferay and login.
      2. Go to Control Panel => Polls.
      3. Add a question, When add question in Choices input <script>alert("xss")</script>.
      4. Then click save.
      5. Click the question and select one and try click Vote button.

      I upload an image can see the result.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                sophia.zhang Sophia Zhang
                Reporter:
                mark.jin Mark Jin (Inactive)
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  8 years, 6 weeks, 6 days ago