Servers and applications
CVE-2022-42114
A Cross-site scripting (XSS) vulnerability in the Role module's edit role assignees page in Liferay Portal 7.4.0 through 7.4.3.36, and Liferay DXP 7.4 before update 37 allows remote attackers to inject arbitrary web script or HTML.
- Severity
- Medium 5.4
- Published
- 18 Oct 2022
- Last changed
- 9 Jul 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 7.4.3.37
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Liferay Portal / DXPServers and applications · cpe:a:liferay:liferay_portal |
|