Executive brief
Liferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping
Affected products
- Maven com.liferay.portal:release.portal.bom
- Maven ccom.liferay:com.liferay.dynamic.data.mapping.web
Junglewise Threat Intelligence
CVE-2025-43746: Liferay Portal Vulnerable to Cross-Site Scripting in Dynamic Data Mapping
CVE-2025-43746 · Severity: medium · CVSS 4 · Published 2025-08-20
Technologies: com.liferay.portal:release.portal.bom (Maven). Vendors: Maven.
Related threats
- Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter
- Liferay Portal is vulnerable to XSS in the Blogs widget
- Liferay Portal is vulnerable to DNS rebinding attacks
- Liferay Portal vulnerable to password enumeration
- Liferay Portal Vulnerable to DoS via Crafted Headless API Request