Vulnerability Details CVE-2025-43756
<!--td {border: 1px solid #cccccc;}br {mso-data-placement:same-cell;}-->A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.15, 2025.Q2.0 through 2025.Q2.2 and 2024.Q1.13 through 2024.Q1.19 allows a remote authenticated user to inject JavaScript code via snippet parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.8%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2025-43756
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.1
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.10
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.11
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.12
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.13
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.14
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.15
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.16
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.17
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.18
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.19
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.2
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.3
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.4
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.5
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.6
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.7
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.8
-
cpe:2.3:a:liferay:digital_experience_platform:2024.q1.9
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.0
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.1
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.10
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.11
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.12
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.13
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.14
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.15
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.2
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.3
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.4
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.5
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.6
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.7
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.8
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q1.9
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q2.0
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q2.1
-
cpe:2.3:a:liferay:digital_experience_platform:2025.q2.2
-
cpe:2.3:a:liferay:liferay_portal:7.4.3.132