Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.calendar.web

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Maven Central

Advisories 3

  • CVE-2025-62240Medium 4.8

    Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP…

    Affected: from 5.0.45, fixed in 5.0.88.

  • CVE-2025-43820Medium 4.8

    Multiple cross-site scripting (XSS) vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35…

    Affected: from 5.0.45, fixed in 5.0.88.

  • CVE-2025-43818Medium 4.8

    Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0…

    Affected: from 5.0.45, fixed in 5.0.87.