Threats tagged 'ghsa-2j97-4jmq-c4xf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2025-62264Com.liferay.portal:release.portal.bom: Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter Medium5.12025-10-31GCVE DatabaseCVE-2025-62264 A reflected cross-site scripting (XSS) vulnerability exists in Liferay Portal versions 7.4.3.8 through 7.4.3.111. The flaw allows remote attackers to inject arbitrary web script or HTML via the selectedLanguageId parameter in the Language Override feature. This vulnerability affects Liferay Portal and Liferay DXP versions specified and has a medium severity rating with a CVSS score of 6.1. A patch is available in version 7.4.3.112-ga112. Report on CVE-2025-62264 Vulnerability CWE-79 #ghsa-2j97-4jmq-c4xf #maven	GCVE Database	2025-10-31

Page 1 of 1