Description
A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.
Remediation
References
Related Vulnerabilities
WordPress Plugin Mobile Events Manager CSV Injection (1.4.7)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3383)
WordPress Plugin WooCommerce Customers Manager Unspecified Vulnerability (26.6)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.9.13)
WordPress Plugin Adminimize 'page' Parameter Cross-Site Scripting (1.7.21)