← Database

CVE-2022-42119

MEDIUM CVSS: 5.4 Published: 2022-11-15 Modified: 2026-07-09

Description

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

Affected Platforms

Liferay Liferay PortalLiferay Dxp

Weakness Type

CWE-79, CWE-79

References