Security Advisory

CVE-2022-42110

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-14 00:00:00

Last updated 2025-04-30 18:52:45

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.

← Browse all CVEs View on cve.org ↗