Executive brief
Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
Affected products
- Maven com.liferay:com.liferay.frontend.taglib.clay
Junglewise Threat Intelligence
CVE-2021-38264: Liferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter
CVE-2021-38264 · Severity: low · CVSS 3.1 · Published 2022-03-04
Technologies: com.liferay:com.liferay.frontend.taglib.clay (Maven). Vendors: Maven.