XSS issue in the list view interface in Web content portlet.

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE
• Fix Version/s: 6.2.4 CE GA5, 6.2.X EE
• Component/s: Security Vulnerability, Web Content > Web Content Administration
• Labels:
  • ee-ts
  • liferay-fixpack-portal-58-6210
  • security-filter-vulnerabilities
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Story Points: 6
• Fix Priority: 3
• Git Pull Request: https://github.com/daledotshan/liferay-portal-ee/pull/68

1. Navigate to Control Panel > Site Administration > Web Content.
2. Set the view to List.
3. Create a Web Content article with the title: "><script>alert('Title1')</script>
4. Publish the article.

Expected Result:
No XSS pop-up will appear.
Actual Result:
XSS pop-up appears.