VYPR
Low severityGHSA Advisory· Published Sep 9, 2025· Updated Sep 18, 2025

CVE-2025-43774

CVE-2025-43774

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
com.liferay:com.liferay.frontend.taglib.clayMaven
< 15.2.115.2.1

Affected products

1

Patches

1
e15df92e3faa

LPD-52924 - getSubtitle should be escaped since it is already being escaped in the React component, but just not on the first load.

https://github.com/liferay/liferay-portalEvan ThibodeauApr 15, 2025via ghsa
1 file changed · +1 1
  • modules/apps/frontend-taglib/frontend-taglib-clay/src/main/java/com/liferay/frontend/taglib/clay/servlet/taglib/VerticalCardTag.java+1 1 modified
    @@ -625,7 +625,7 @@ else if (Validator.isNotNull(stickerLabel)) {
     			jspWriter.write("<p class=\"card-subtitle\"><span class=\"");
     			jspWriter.write("text-truncate-inline\"><span class=\"");
     			jspWriter.write("text-truncate\">");
    -			jspWriter.write(subtitle);
    +			jspWriter.write(HtmlUtil.escape(subtitle));
     			jspWriter.write("</span></span></p>");
     		}
     
    

Vulnerability mechanics

Not enough inputs (no patches or CWE) to synthesize mechanics for this CVE.

References

5

News mentions

0

No linked articles in our index yet.