cbcvebase.
CVE-2021-29039
published 2021-05-16

CVE-2021-29039: Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject…

medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.

Affected

1 ranges
VendorProductVersion rangeFixed in
liferayliferay_portal——