Vulnerabilidades do Maven Com.liferay:com.liferay.calendar.web
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Maven Com.liferay:com.liferay.calendar.web: 2 registro(s), com versões afetadas e correções.
CVE-2025-62240
Média · 5.4
CWE-79 09/10/2025
Liferay Portal is vulnerable to XSS through its Calendar Events parameters
Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user’s (1) First Name, (2) Middle Name or (3) Last Name text field.
CVE-2025-43818
Média · 6.1
CWE-79 29/09/2025
Liferay Portal vulnerable to cross-site scripting in the Calendar widget
Cross-site scripting (XSS) vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Calendar's “Name” text field