com.liferay:com.liferay.captcha.taglib@1.0.0 vulnerabilities
-
latest version
5.1.4
-
latest non vulnerable version
-
first published
7 years ago
-
latest version published
4 months ago
-
licenses detected
- [1.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.liferay:com.liferay.captcha.taglib package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
com.liferay:com.liferay.captcha.taglib is a taglib library for liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call How to fix Cross-site Scripting (XSS)? Upgrade |
[,2.0.2)
|