com.liferay:com.liferay.asset.taglib@4.0.34 vulnerabilities
latest version
12.0.1
latest non vulnerable version
first published
9 years ago
latest version published
13 days ago
licenses detected
- [1.0.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the com.liferay:com.liferay.asset.taglib package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via a crafted payload injected into the name of a tag. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.1.9) |
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via injection of a web script or HTML in the name of an asset category. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.1.0) |
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Asset module's category selector input field. It allows remote attackers to inject arbitrary web script or HTML via the How to fix Cross-site Scripting (XSS)? Upgrade | [,5.2.53) |