- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 2 medium
- Registry
- Maven Central
Advisories 2
- CVE-2025-43812Medium 4.8
Cross-site scripting (XSS) vulnerability in web content template in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0…
Affected: from 5.0.34, fixed in 5.0.161.
- CVE-2025-43737Medium 5.1
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8 and…
Affected: fixed in 5.0.196.