Vulnerability Details CVE-2023-44310
Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into page's "Name" text field.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.0%
CVSS Severity
CVSS v3 Score 9.0
References
Products affected by CVE-2023-44310
-
cpe:2.3:a:liferay:digital_experience_platform:7.1
-
cpe:2.3:a:liferay:digital_experience_platform:7.4
-
cpe:2.3:a:liferay:liferay_portal:7.3.6
-
cpe:2.3:a:liferay:liferay_portal:7.3.7
-
cpe:2.3:a:liferay:liferay_portal:7.4.0
-
cpe:2.3:a:liferay:liferay_portal:7.4.1
-
cpe:2.3:a:liferay:liferay_portal:7.4.2
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.10
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.11
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.12
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.13
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.14
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.15
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.16
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.17
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.18
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.19
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.20
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.21
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.22
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.23
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.24
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.25
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.26
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.27
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.28
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.29
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.30
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.31
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.32
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.33
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.34
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.35
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.36
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.37
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.38
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.39
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.4
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.40
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.41
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.42
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.43
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.44
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.45
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.46
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.47
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.48
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.5
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.6
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.7
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.8
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.9