Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-28781

XSS in Shopping portlet - category parent name

    Details

      Description

      How to reproduce

      1. Add Shopping portlet on a page
      2. Create Category with name: "'><script>alert('xss-category-name')</script> and Save
      3. Click on the category
      4. Click Create subcategory and create any subcategory
      5. Edit the subcategory, JS alert should appear

        Attachments

          Activity

            People

            Assignee:
            justin.choi Justin Choi (Inactive)
            Reporter:
            tomas.polesovsky Tomáš Polešovský
            Participants of an Issue:
            Recent user:
            Esther Sanz
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              8 years, 39 weeks, 5 days ago

                Packages

                Version Package
                6.1.1 CE GA2
                6.1.20 EE GA2
                6.2.0 CE M2