CVE-2022-42119

published 2022-11-15

CVE-2022-42119: Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
liferay	dxp	—	—
liferay	liferay_portal	7.3.5 – 7.4.2	—

CWE-79