Junglewise Threat Intelligence

CVE-2025-43755: Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

CVE-2025-43755 · Severity: medium · CVSS 4 · Published 2025-08-21

Technologies: com.liferay:com.liferay.layout.admin.web (Maven). Vendors: Maven.

Executive brief

Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter

Affected products

Maven com.liferay:com.liferay.layout.admin.web

Related threats

Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)