A Cross-site scripting (XSS)... CVE-2022-38901

- AV AC AU C I A
发布： 2022-10-19
修订： 2024-11-21

A Cross-site scripting (XSS) vulnerability in the Document and Media module - file upload functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the description field of uploaded svg file.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有36条受影响产品信息