CVE-2022-42119

Publication date

2022-11-15 00:00:00

Family

mitre

State

PUBLISHED

Description

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.