Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay:com.liferay.frontend.taglib.clay

4 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2025-43734Medium 5.1

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through…

    Affected: fixed in 15.2.2.

  • CVE-2022-42117Medium 6.1

    A Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.3.2 through 7.4.3.16, and Liferay DXP 7.3…

    Affected: fixed in 9.1.7.

  • Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 and 7.4.1 allows remote attackers to inject…

    Affected: fixed in 7.1.15.

  • Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary…

    Affected: fixed in 7.1.15.