NetSight
IP …
medium6.1

CVE-2017-12649

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.

Impact

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.

Affected products

VendorProductAffected versions
LiferayLiferay Portal
through 7.0

Weakness classification

CWE-79

References