Description
Cross-site scripting (XSS) vulnerability in the Portal Search module's Tag Facet widget in Liferay Portal 7.1.0 through 7.4.2 allows remote attackers to inject arbitrary web script or HTML via the `tag` parameter.
Severity
null (null)
Notes
There is no patch available for Liferay Portal 7.1, 7.2, 7.3 and 7.4. Instead, users should upgrade to Liferay Portal 7.4 GA4 (7.4.3.4) or later.
Publication date: Wed, 19 Oct 2022 01:14:00 +0000