Liferay Portal versions 7.3.7 through 7.4.3.103 and Liferay DXP versions 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 service pack 3 through update 36 are affected by multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web scripts or HTML via crafted payloads in the 'Title' field of Account Roles or the 'Name' field of Organizations. The vulnerabilities can be triggered when viewing or selecting account role or organization pages. A fix is available in version 2.0.108 of the affected component.