Executive brief
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Affected products
- Maven com.liferay:com.liferay.calendar.web
Junglewise Threat Intelligence
CVE-2025-43818: Liferay Portal vulnerable to cross-site scripting in the Calendar widget
CVE-2025-43818 · Severity: medium · CVSS 4 · Published 2025-09-30
Technologies: com.liferay:com.liferay.calendar.web (Maven). Vendors: Maven.