Threats tagged 'ghsa-q285-wfpg-93hr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.6	EPSS 0.2%	CVE-2025-62267Com.liferay:com.liferay.dynamic.data.mapping.item.selector.web: Liferay Portal and DXP affected by multiple cross-site Medium4.6EPSS 0.2%2025-10-31GCVE DatabaseCVE-2025-62267 Multiple cross-site scripting (XSS) vulnerabilities exist in the web content template's select structure page of Liferay Portal and DXP. These vulnerabilities affect versions prior to 1.0.9 of the com.liferay.dynamic.data.mapping.item.selector.web component and allow remote attackers to inject arbitrary web scripts or HTML via crafted payloads in user name fields. EPSS 0.2%Report on CVE-2025-62267 Vulnerability CWE-79 #ghsa-q285-wfpg-93hr #maven	GCVE Database	2025-10-31

Page 1 of 1