CVE-2023-42629

Summary

CVE-2023-42629 is a stored cross-site scripting (XSS) vulnerability affecting Liferay Portal versions 7.4.2 through 7.4.3.87 and Liferay DXP before update 88. Malicious actors can exploit this flaw by injecting arbitrary web scripts or HTML into a Vocabulary's description text field. Successful attacks could result in unintended execution of malicious code, posing a significant risk to users who visit a vulnerable page. It is essential to apply the available patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.