A Cross-site scripting (XSS)... CVE-2022-38902

- AV AC AU C I A
发布: 2022-10-13
修订: 2024-11-21

A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic.

0%
暂无可用Exp或PoC
当前有13条受影响产品信息