Executive brief
Liferay Portal is vulnerable to Reflected XSS attack through get_editor path
Affected products
- Maven com.liferay:com.liferay.frontend.editor.ckeditor.web
Junglewise Threat Intelligence
CVE-2025-43783: Liferay Portal is vulnerable to Reflected XSS attack through get_editor path
CVE-2025-43783 · Severity: medium · CVSS 4 · Published 2025-09-10
Vendors: Maven.