Vulnerability CVE-2022-38902
Published: 2022-10-13

Description:
A Cross-site scripting (XSS) vulnerability in the Blog module - add new topic functionality in Liferay Digital Experience Platform 7.3.10 SP3 allows remote attackers to inject arbitrary JS script or HTML into the name field of newly created topic.

 References:
http://liferay.com
https://www.offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38902/
https://drive.proton.me/urls/D27RQ14NGW#b71d8XrBl2Mu
Copyright 2026, cxsecurity.com

 

Back to Top