medium6.1
CVE-2019-16147
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
Impact
Liferay Portal through 7.2.0 GA1 allows XSS via a journal article title to journal_article/page.jsp in journal/journal-taglib.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Liferay | Liferay Portal | before 7.2.0 Version 7.2.0 |