Security Advisory

CVE-2022-28980

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-22 00:13:41
Last updated 2025-05-27 17:48:38
Assigner mitre
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal v7.4.3.4 and Liferay DXP v7.4 GA allows attackers to execute arbitrary web scripts or HTML via parameters with the filter_ prefix.