CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25610

In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default configuration does not sanitize blog entries of JavaScript, which allows remote authenticated users to inject arbitrary web script or HTML (XSS) via a crafted payload injected into a blog entry’s content text field.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.3%

CVSS Severity

CVSS v3 Score 9.0

References

Products affected by CVE-2024-25610

Liferay » Digital Experience Platform » Version: N/A

cpe:2.3:a:liferay:digital_experience_platform:-
Liferay » Digital Experience Platform » Version: 6.2

cpe:2.3:a:liferay:digital_experience_platform:6.2
Liferay » Digital Experience Platform » Version: 7.0

cpe:2.3:a:liferay:digital_experience_platform:7.0
Liferay » Digital Experience Platform » Version: 7.1

cpe:2.3:a:liferay:digital_experience_platform:7.1
Liferay » Digital Experience Platform » Version: 7.2

cpe:2.3:a:liferay:digital_experience_platform:7.2
Liferay » Digital Experience Platform » Version: 7.3

cpe:2.3:a:liferay:digital_experience_platform:7.3
Liferay » Digital Experience Platform » Version: 7.4

cpe:2.3:a:liferay:digital_experience_platform:7.4
Liferay » Liferay Portal » Version: N/A

cpe:2.3:a:liferay:liferay_portal:-
Liferay » Liferay Portal » Version: 1.7.5

cpe:2.3:a:liferay:liferay_portal:1.7.5
Liferay » Liferay Portal » Version: 1.8.0

cpe:2.3:a:liferay:liferay_portal:1.8.0
Liferay » Liferay Portal » Version: 1.9.0

cpe:2.3:a:liferay:liferay_portal:1.9.0
Liferay » Liferay Portal » Version: 1.9.1

cpe:2.3:a:liferay:liferay_portal:1.9.1
Liferay » Liferay Portal » Version: 1.9.5

cpe:2.3:a:liferay:liferay_portal:1.9.5
Liferay » Liferay Portal » Version: 2.0.0

cpe:2.3:a:liferay:liferay_portal:2.0.0
Liferay » Liferay Portal » Version: 2.0.3

cpe:2.3:a:liferay:liferay_portal:2.0.3
Liferay » Liferay Portal » Version: 2.1.0

cpe:2.3:a:liferay:liferay_portal:2.1.0
Liferay » Liferay Portal » Version: 2.1.1

cpe:2.3:a:liferay:liferay_portal:2.1.1
Liferay » Liferay Portal » Version: 2.2.0

cpe:2.3:a:liferay:liferay_portal:2.2.0
Liferay » Liferay Portal » Version: 2.2.1

cpe:2.3:a:liferay:liferay_portal:2.2.1
Liferay » Liferay Portal » Version: 2.2.5

cpe:2.3:a:liferay:liferay_portal:2.2.5
Liferay » Liferay Portal » Version: 3.0.0

cpe:2.3:a:liferay:liferay_portal:3.0.0
Liferay » Liferay Portal » Version: 3.1.0

cpe:2.3:a:liferay:liferay_portal:3.1.0
Liferay » Liferay Portal » Version: 3.2.0

cpe:2.3:a:liferay:liferay_portal:3.2.0
Liferay » Liferay Portal » Version: 3.5.0

cpe:2.3:a:liferay:liferay_portal:3.5.0
Liferay » Liferay Portal » Version: 3.6.0

cpe:2.3:a:liferay:liferay_portal:3.6.0
Liferay » Liferay Portal » Version: 3.6.1

cpe:2.3:a:liferay:liferay_portal:3.6.1
Liferay » Liferay Portal » Version: 4.0.0

cpe:2.3:a:liferay:liferay_portal:4.0.0
Liferay » Liferay Portal » Version: 4.1.0

cpe:2.3:a:liferay:liferay_portal:4.1.0
Liferay » Liferay Portal » Version: 4.1.1

cpe:2.3:a:liferay:liferay_portal:4.1.1
Liferay » Liferay Portal » Version: 4.1.2

cpe:2.3:a:liferay:liferay_portal:4.1.2
Liferay » Liferay Portal » Version: 4.1.3

cpe:2.3:a:liferay:liferay_portal:4.1.3
Liferay » Liferay Portal » Version: 4.2.0

cpe:2.3:a:liferay:liferay_portal:4.2.0
Liferay » Liferay Portal » Version: 4.2.1

cpe:2.3:a:liferay:liferay_portal:4.2.1
Liferay » Liferay Portal » Version: 4.2.2

cpe:2.3:a:liferay:liferay_portal:4.2.2
Liferay » Liferay Portal » Version: 4.3.0

cpe:2.3:a:liferay:liferay_portal:4.3.0
Liferay » Liferay Portal » Version: 4.3.1

cpe:2.3:a:liferay:liferay_portal:4.3.1
Liferay » Liferay Portal » Version: 4.3.2

cpe:2.3:a:liferay:liferay_portal:4.3.2
Liferay » Liferay Portal » Version: 4.3.3

cpe:2.3:a:liferay:liferay_portal:4.3.3
Liferay » Liferay Portal » Version: 4.3.4

cpe:2.3:a:liferay:liferay_portal:4.3.4
Liferay » Liferay Portal » Version: 4.3.5

cpe:2.3:a:liferay:liferay_portal:4.3.5
Liferay » Liferay Portal » Version: 4.3.6

cpe:2.3:a:liferay:liferay_portal:4.3.6
Liferay » Liferay Portal » Version: 4.4.0

cpe:2.3:a:liferay:liferay_portal:4.4.0
Liferay » Liferay Portal » Version: 4.4.1

cpe:2.3:a:liferay:liferay_portal:4.4.1
Liferay » Liferay Portal » Version: 4.4.2

cpe:2.3:a:liferay:liferay_portal:4.4.2
Liferay » Liferay Portal » Version: 5.0.0

cpe:2.3:a:liferay:liferay_portal:5.0.0
Liferay » Liferay Portal » Version: 5.1.0

cpe:2.3:a:liferay:liferay_portal:5.1.0
Liferay » Liferay Portal » Version: 5.1.1

cpe:2.3:a:liferay:liferay_portal:5.1.1
Liferay » Liferay Portal » Version: 5.1.2

cpe:2.3:a:liferay:liferay_portal:5.1.2
Liferay » Liferay Portal » Version: 5.2

cpe:2.3:a:liferay:liferay_portal:5.2
Liferay » Liferay Portal » Version: 5.2.0

cpe:2.3:a:liferay:liferay_portal:5.2.0
Liferay » Liferay Portal » Version: 5.2.1

cpe:2.3:a:liferay:liferay_portal:5.2.1
Liferay » Liferay Portal » Version: 5.2.2

cpe:2.3:a:liferay:liferay_portal:5.2.2
Liferay » Liferay Portal » Version: 5.2.3

cpe:2.3:a:liferay:liferay_portal:5.2.3
Liferay » Liferay Portal » Version: 6.0

cpe:2.3:a:liferay:liferay_portal:6.0
Liferay » Liferay Portal » Version: 6.0.0

cpe:2.3:a:liferay:liferay_portal:6.0.0
Liferay » Liferay Portal » Version: 6.0.1

cpe:2.3:a:liferay:liferay_portal:6.0.1
Liferay » Liferay Portal » Version: 6.0.2

cpe:2.3:a:liferay:liferay_portal:6.0.2
Liferay » Liferay Portal » Version: 6.0.3

cpe:2.3:a:liferay:liferay_portal:6.0.3
Liferay » Liferay Portal » Version: 6.0.4

cpe:2.3:a:liferay:liferay_portal:6.0.4
Liferay » Liferay Portal » Version: 6.0.5

cpe:2.3:a:liferay:liferay_portal:6.0.5
Liferay » Liferay Portal » Version: 6.0.6

cpe:2.3:a:liferay:liferay_portal:6.0.6
Liferay » Liferay Portal » Version: 6.1

cpe:2.3:a:liferay:liferay_portal:6.1
Liferay » Liferay Portal » Version: 6.1.0

cpe:2.3:a:liferay:liferay_portal:6.1.0
Liferay » Liferay Portal » Version: 6.1.1

cpe:2.3:a:liferay:liferay_portal:6.1.1
Liferay » Liferay Portal » Version: 6.1.2

cpe:2.3:a:liferay:liferay_portal:6.1.2
Liferay » Liferay Portal » Version: 6.1.2_ce_ga3

cpe:2.3:a:liferay:liferay_portal:6.1.2_ce_ga3
Liferay » Liferay Portal » Version: 6.1.x_ee

cpe:2.3:a:liferay:liferay_portal:6.1.x_ee
Liferay » Liferay Portal » Version: 6.2

cpe:2.3:a:liferay:liferay_portal:6.2
Liferay » Liferay Portal » Version: 6.2.0

cpe:2.3:a:liferay:liferay_portal:6.2.0
Liferay » Liferay Portal » Version: 6.2.1

cpe:2.3:a:liferay:liferay_portal:6.2.1
Liferay » Liferay Portal » Version: 6.2.2

cpe:2.3:a:liferay:liferay_portal:6.2.2
Liferay » Liferay Portal » Version: 6.2.3

cpe:2.3:a:liferay:liferay_portal:6.2.3
Liferay » Liferay Portal » Version: 6.2.4

cpe:2.3:a:liferay:liferay_portal:6.2.4
Liferay » Liferay Portal » Version: 6.2.5

cpe:2.3:a:liferay:liferay_portal:6.2.5
Liferay » Liferay Portal » Version: 6.2.x_ee

cpe:2.3:a:liferay:liferay_portal:6.2.x_ee
Liferay » Liferay Portal » Version: 7.0

cpe:2.3:a:liferay:liferay_portal:7.0
Liferay » Liferay Portal » Version: 7.0.0

cpe:2.3:a:liferay:liferay_portal:7.0.0
Liferay » Liferay Portal » Version: 7.0.1

cpe:2.3:a:liferay:liferay_portal:7.0.1
Liferay » Liferay Portal » Version: 7.0.2

cpe:2.3:a:liferay:liferay_portal:7.0.2
Liferay » Liferay Portal » Version: 7.0.3

cpe:2.3:a:liferay:liferay_portal:7.0.3
Liferay » Liferay Portal » Version: 7.0.3_ga4

cpe:2.3:a:liferay:liferay_portal:7.0.3_ga4
Liferay » Liferay Portal » Version: 7.0.4

cpe:2.3:a:liferay:liferay_portal:7.0.4
Liferay » Liferay Portal » Version: 7.0.5

cpe:2.3:a:liferay:liferay_portal:7.0.5
Liferay » Liferay Portal » Version: 7.0.6

cpe:2.3:a:liferay:liferay_portal:7.0.6
Liferay » Liferay Portal » Version: 7.1

cpe:2.3:a:liferay:liferay_portal:7.1
Liferay » Liferay Portal » Version: 7.1.0

cpe:2.3:a:liferay:liferay_portal:7.1.0
Liferay » Liferay Portal » Version: 7.1.1

cpe:2.3:a:liferay:liferay_portal:7.1.1
Liferay » Liferay Portal » Version: 7.1.2

cpe:2.3:a:liferay:liferay_portal:7.1.2
Liferay » Liferay Portal » Version: 7.1.3

cpe:2.3:a:liferay:liferay_portal:7.1.3
Liferay » Liferay Portal » Version: 7.2

cpe:2.3:a:liferay:liferay_portal:7.2
Liferay » Liferay Portal » Version: 7.2.0

cpe:2.3:a:liferay:liferay_portal:7.2.0
Liferay » Liferay Portal » Version: 7.2.1

cpe:2.3:a:liferay:liferay_portal:7.2.1
Liferay » Liferay Portal » Version: 7.3

cpe:2.3:a:liferay:liferay_portal:7.3
Liferay » Liferay Portal » Version: 7.3.0

cpe:2.3:a:liferay:liferay_portal:7.3.0
Liferay » Liferay Portal » Version: 7.3.1

cpe:2.3:a:liferay:liferay_portal:7.3.1
Liferay » Liferay Portal » Version: 7.3.2

cpe:2.3:a:liferay:liferay_portal:7.3.2
Liferay » Liferay Portal » Version: 7.3.3

cpe:2.3:a:liferay:liferay_portal:7.3.3
Liferay » Liferay Portal » Version: 7.3.4

cpe:2.3:a:liferay:liferay_portal:7.3.4
Liferay » Liferay Portal » Version: 7.3.5

cpe:2.3:a:liferay:liferay_portal:7.3.5
Liferay » Liferay Portal » Version: 7.3.6

cpe:2.3:a:liferay:liferay_portal:7.3.6
Liferay » Liferay Portal » Version: 7.3.7

cpe:2.3:a:liferay:liferay_portal:7.3.7
Liferay » Liferay Portal » Version: 7.4.0

cpe:2.3:a:liferay:liferay_portal:7.4.0
Liferay » Liferay Portal » Version: 7.4.1

cpe:2.3:a:liferay:liferay_portal:7.4.1
Liferay » Liferay Portal » Version: 7.4.2

cpe:2.3:a:liferay:liferay_portal:7.4.2
Liferay » Liferay Portal » Version: 7.4.3.10

cpe:2.3:a:liferay:liferay_portal:7.4.3.10
Liferay » Liferay Portal » Version: 7.4.3.11

cpe:2.3:a:liferay:liferay_portal:7.4.3.11
Liferay » Liferay Portal » Version: 7.4.3.12

cpe:2.3:a:liferay:liferay_portal:7.4.3.12
Liferay » Liferay Portal » Version: 7.4.3.4

cpe:2.3:a:liferay:liferay_portal:7.4.3.4
Liferay » Liferay Portal » Version: 7.4.3.5

cpe:2.3:a:liferay:liferay_portal:7.4.3.5
Liferay » Liferay Portal » Version: 7.4.3.6

cpe:2.3:a:liferay:liferay_portal:7.4.3.6
Liferay » Liferay Portal » Version: 7.4.3.7

cpe:2.3:a:liferay:liferay_portal:7.4.3.7
Liferay » Liferay Portal » Version: 7.4.3.8

cpe:2.3:a:liferay:liferay_portal:7.4.3.8
Liferay » Liferay Portal » Version: 7.4.3.9

cpe:2.3:a:liferay:liferay_portal:7.4.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25610

Products

Pricing

Contact Us