CVE-2023-44310

Summary

CVE-2023-44310 is a stored cross-site scripting (XSS) vulnerability affecting Liferay Portal versions 7.3.6 through 7.4.3.78, and Liferay DXP versions 7.3 fix pack 1 through update 23, and 7.4 before update 79. This issue allows remote attackers to inject arbitrary web script or HTML into a page's "Name" text field, potentially leading to serious security consequences such as data theft or unauthorized access. Attackers can exploit this vulnerability by crafting a malicious payload and submitting it to the affected system. Users are advised to update their Liferay installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.