6.0.145
8 years ago
20 days ago
Known vulnerabilities in the com.liferay:com.liferay.portal.search.web package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for freeVulnerability | Vulnerable Version |
---|---|
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper user-input validation in the Modified Facet widget allowing remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a facet label. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.36) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.12) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Portal Search module's How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.45) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via a crafted payload injected into the How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.19) |