Maven package

com.liferay/com.liferay.product.navigation.control.menu.web

pkg:maven/com.liferay/com.liferay.product.navigation.control.menu.web

Vulnerabilities (1)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2025-43815		—		>= 6.0.80, < 6.0.83	6.0.83	Sep 29, 2025	Reflected cross-site scripting (XSS) vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the com_liferay_layout_ad

CVE-2025-43815Sep 29, 2025
affected >= 6.0.80, < 6.0.83fixed 6.0.83
Reflected cross-site scripting (XSS) vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the com_liferay_layout_ad