Homepage

com.liferay:com.liferay.frontend.taglib.clay@7.1.0 vulnerabilities

  • latest version

    15.1.3

  • latest non vulnerable version

    15.1.3

  • first published

    6 years ago

  • latest version published

    21 days ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the com.liferay:com.liferay.frontend.taglib.clay package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Cross-site Scripting (XSS)

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the _com_liferay_roles_admin_web_portlet_RolesAdminPortlet_tabs2 parameter.

    How to fix Cross-site Scripting (XSS)?

    Upgrade com.liferay:com.liferay.frontend.taglib.clay to version 13.13.1 or higher.

    [,13.13.1)
    • M
    Cross-site Scripting (XSS)

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the Frontend Taglib module's <clay:label> tag due to improper user-input validation.

    How to fix Cross-site Scripting (XSS)?

    Upgrade com.liferay:com.liferay.frontend.taglib.clay to version 9.1.7 or higher.

    [,9.1.7)
    • M
    Cross-site Scripting (XSS)

    Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the keywords parameter in the Search function.

    How to fix Cross-site Scripting (XSS)?

    Upgrade com.liferay:com.liferay.frontend.taglib.clay to version 7.1.10 or higher.

    [,7.1.10)
    Go back to all versions of this package