CVE-2023-42628

Summary

CVE-2023-42628 is a stored cross-site scripting (XSS) vulnerability affecting various versions of Liferay Portal and DXP. This issue, located in the Wiki widget, allows remote attackers to inject malicious web scripts or HTML into a parent wiki page by manipulating a crafted payload in the 'Content' field of a wiki page. Successful exploitation could lead to unauthorized access, data theft, or site defacement. Users are advised to update their Liferay installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.