UpHeron
All vulnerabilities

Servers and applications

CVE-2020-7934

In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a…

Severity
Medium 5.4
Published
28 Jan 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
4.5% in the next 30 daysHigher than 91% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Liferay Portal / DXPServers and applications · cpe:a:liferay:liferay_portal
  • From 7.1.0 up to 7.2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-7934
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-7934