XSS problem in Role and Community.

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 5.2.3, 5.2.9 EE
• Fix Version/s: 5.2.X EE
• Component/s: Accessibility, Security Vulnerability, ~ [Archived] Sites Management
• Labels:
  • QA-R
• Environment: Tomcat 6.29 + MySQL 5.0. 5.2.X Revision 78087
• Branch Version/s:
  5.2.x
• Backported to Branch:
  Committed

XSS problem in Role and Community.

Steps to reproduced the problem:

1. Start liferay and login.
2. Go to Control Panel.
3. Then add or edit a Role or Commumy. User inserts the following code.<script>alert("xss")</script>.
4. Then click Save button.
5. Then add a portlet click Permissions.

The problem only happened 52