Vulnerability Details CVE-2022-42119
Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.1%
CVSS Severity
CVSS v3 Score 5.4
References
- http://liferay.com
- https://issues.liferay.com/browse/LPE-17632
- https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119
- http://liferay.com
- https://issues.liferay.com/browse/LPE-17632
- https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119
Products affected by CVE-2022-42119
-
cpe:2.3:a:liferay:dxp:7.3
-
cpe:2.3:a:liferay:liferay_portal:7.3.5
-
cpe:2.3:a:liferay:liferay_portal:7.3.6
-
cpe:2.3:a:liferay:liferay_portal:7.3.7
-
cpe:2.3:a:liferay:liferay_portal:7.4.0
-
cpe:2.3:a:liferay:liferay_portal:7.4.1
-
cpe:2.3:a:liferay:liferay_portal:7.4.2