CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.6. It affects Java. It may be remotely exploitable.
CVE
CVE-2024-25147
Severity
CRITICAL
CVSS
9.6
EPSS
0.56%
Java
Original NVD Description
Cross-site scripting (XSS) vulnerability in HtmlUtil.escapeJsLink in Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via crafted javascript: style links.
Related CVEs
Other vulnerabilities affecting the same vendor(s)