CVE-2021-35463

MEDIUM · CVSS 6.1 EPSS 0.75%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-35463

Severity

MEDIUM

CVSS

6.1

EPSS

0.75%

Original NVD Description

Cross-site scripting (XSS) vulnerability in the Frontend Taglib module in Liferay Portal 7.4.0 allows remote attackers to inject arbitrary web script or HTML into the management toolbar search via the `keywords` parameter.