Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-28781

XSS in Shopping portlet - category parent name

    Details

      Description

      How to reproduce

      1. Add Shopping portlet on a page
      2. Create Category with name: "'><script>alert('xss-category-name')</script> and Save
      3. Click on the category
      4. Click Create subcategory and create any subcategory
      5. Edit the subcategory, JS alert should appear

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                7 years, 27 weeks, 3 days ago

                Packages

                Version Package
                6.1.1 CE GA2
                6.1.20 EE GA2
                6.2.0 CE M2