CVE-2023-44309

Summary

CVE-2023-44309 is a stored cross-site scripting (XSS) vulnerability affecting Liferay Portal versions 7.4.2 through 7.4.3.53 and Liferay DXP before update 54. These vulnerabilities lie in the fragment components of these software. A remote attacker can exploit this issue by injecting arbitrary web scripts or HTML into any non-HTML field of a linked source asset. Successful exploitation could lead to data theft, unauthorized access, or other malicious activities. Users are urged to update their software to address this vulnerability promptly.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.