Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-28781

XSS in Shopping portlet - category parent name

Details

    Description

      How to reproduce

      1. Add Shopping portlet on a page
      2. Create Category with name: "'><script>alert('xss-category-name')</script> and Save
      3. Click on the category
      4. Click Create subcategory and create any subcategory
      5. Edit the subcategory, JS alert should appear

      Attachments

        Activity

          People

            justin.choi Justin Choi (Inactive)
            tomas.polesovsky Tomáš Polešovský
            Kiyoshi Lee Kiyoshi Lee
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              10 years, 20 weeks, 3 days ago

              Packages

                Version Package
                6.1.1 CE GA2
                6.1.20 EE GA2
                6.2.0 CE M2