com.liferay:com.liferay.portal.search.web@5.0.27 vulnerabilities
latest version
6.0.145
latest non vulnerable version
first published
8 years ago
latest version published
19 days ago
licenses detected
- [0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.liferay:com.liferay.portal.search.web package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper user-input validation in the Modified Facet widget allowing remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a facet label. How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.36) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.12) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Portal Search module's How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.45) |
Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via a crafted payload injected into the How to fix Cross-site Scripting (XSS)? Upgrade | [,6.0.19) |