Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via an invalid portletId. Remediation References CVE-2017-12645 Related Vulnerabilities Dotclear Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-7903) Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-18624) Oracle Database Server CVE-2015-0479 Vulnerability (CVE-2015-0479) phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5732) Oracle JRE CVE-2018-2663 Vulnerability (CVE-2018-2663) Severity Medium Classification CVE-2017-12645 CWE-707 Tags Missing Update Known Vulnerabilities