CVE-2021-33326 | BDVDB-2026-158014 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Frontend JS module in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 20 and 7.2 before fix pack 9, allows remote attackers to inject arbitrary web script or HTML via the title of a modal window.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747869
https://issues.liferay.com/browse/LPE-17093

Exploit#

No public exploit known

History#

Version 12021-08-03Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.