Junglewise Threat Intelligence

CVE-2025-62264: Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter

CVE-2025-62264 · Severity: low · CVSS 3.1 · Published 2025-10-31

Technologies: com.liferay.portal:release.portal.bom (Maven). Vendors: Maven.

Executive brief

Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter

Affected products

  • Maven com.liferay.portal:release.portal.bom

Related threats