CVE-2021-29039
MEDIUM6.1EPSS 0.47%Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via Categories Admin Page
Published: 5/24/2022Modified: 5/14/2025
Description
Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.
Affected packages (1)
- Maven/com.liferay.portal:release.portal.bom>= 7.3.4, < 7.3.5
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |