CVE-2024-11993

Liferay / Portal PUBLISHED

Description (CNA)

Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.38, and Liferay DXP 7.4 GA through update 38 allows remote attackers to execute arbitrary web script or HTML via Dispatch name field

Affected (CNA)

Vendor / product	Versions
Liferay / Portal	affected 7.4.0 through 7.4.3.38
Liferay / DXP	affected 7.4.13 through 7.4.13-u38

CWE

CWE-79

References

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2024-11993

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.