Details

    • Branch Version/s:
      6.0.x, 5.2.x
    • Backported to Branch:
      Committed

      Description

      XSS issues in Polls portlet.

      Steps to reproduced the issues:

      1. Start liferay and login.
      2. Go to Control Panel => Polls.
      3. Add a question, When add question in Choices input <script>alert("xss")</script>.
      4. Then click save.
      5. Click the question and select one and try click Vote button.

      I upload an image can see the result.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              sophia.zhang Sophia Zhang
              Reporter:
              mark.jin Mark Jin (Inactive)
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                9 years, 34 weeks ago

                  Packages

                  Version Package
                  5.2.X EE
                  --Sprint - SP
                  6.0.12 EE
                  6.1.0 CE RC1