> CVE-2025-43830

« BACK_TO_HOME
PUBLISHED
2025-10-08 14:15
MODIFIED
2025-10-08 19:38
EPSS (Prob. Exploit)
0.24%
Top 85.4%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-10-28

> DESCRIPTION

Stored cross-site scripting (XSS) vulnerability in Forms in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and 7.3 GA through update 35 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a form with a rich text type field.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-378f-8q54-3fqx MODERATE

Liferay Portal is vulnerable to Stored XSS through Forms text type field

AFFECTED PACKAGES:
MAVEN / com.liferay.portal:release.portal.bom
>= 7.3.2, < 7.4.3.112-ga112
Fixed in: 7.4.3.112-ga112

> HISTORIQUE DES MODIFICATIONS

Première apparition
08/10/2025 14:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME