Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.frontend.editor.ckeditor.web

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Maven Central

Advisories 3

  • CVE-2025-43783Medium 5.1

    Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.73 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through…

    Affected: from 5.0.76, fixed in 5.0.102.

  • CVE-2025-43761Medium 6.9

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through…

    Affected: fixed in 5.0.107.

  • CVE-2022-42116Medium 6.1

    A Cross-site scripting (XSS) vulnerability in the Frontend Editor module's integration with CKEditor in Liferay Portal 7.3.2 through…

    Affected: fixed in 5.0.46.