Vulnerability Details CVE-2022-42115
Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` text field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.7%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-42115
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.10
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.11
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.12
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.13
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.14
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.15
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.16
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.17
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.18
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.19
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.20
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.21
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.22
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.23
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.24
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.25
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.26
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.27
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.28
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.29
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.30
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.31
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.32
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.33
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.34
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.35
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.36
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.4
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.5
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.6
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.7
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.8
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.9