Description XSS exists in Liferay Portal before 7.0 CE GA4(7.0.3) via a login name, password, or e-mail address. Remediation References CVE-2017-12646 Related Vulnerabilities WordPress Plugin WordPress Filter Gallery Security Bypass (0.0.6) OpenSSL Numeric Errors Vulnerability (CVE-2016-2181) WordPress Plugin Contus HD FLV Player 'process-sortable.php' SQL Injection (1.3) Next.js Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-5284) Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2361) Severity Medium Classification CVE-2017-12646 CWE-707 Tags Missing Update Known Vulnerabilities