CVE-2025-62267
31.10.2025, 19:15
Multiple cross-site scripting (XSS) vulnerabilities in web content templates select structure page in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 35 through update 92 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a users (1) First Name, (2) Middle Name, or (3) Last Name text field.
| Vendor | Product | Version |
|---|---|---|
| liferay | digital_experience_platform | 7.4 |
| liferay | digital_experience_platform | 7.4:update35 |
| liferay | digital_experience_platform | 7.4:update36 |
| liferay | digital_experience_platform | 7.4:update37 |
| liferay | digital_experience_platform | 7.4:update38 |
| liferay | digital_experience_platform | 7.4:update39 |
| liferay | digital_experience_platform | 7.4:update40 |
| liferay | digital_experience_platform | 7.4:update41 |
| liferay | digital_experience_platform | 7.4:update42 |
| liferay | digital_experience_platform | 7.4:update43 |
| liferay | digital_experience_platform | 7.4:update44 |
| liferay | digital_experience_platform | 7.4:update45 |
| liferay | digital_experience_platform | 7.4:update46 |
| liferay | digital_experience_platform | 7.4:update47 |
| liferay | digital_experience_platform | 7.4:update48 |
| liferay | digital_experience_platform | 7.4:update49 |
| liferay | digital_experience_platform | 7.4:update50 |
| liferay | digital_experience_platform | 7.4:update51 |
| liferay | digital_experience_platform | 7.4:update52 |
| liferay | digital_experience_platform | 7.4:update53 |
| liferay | digital_experience_platform | 7.4:update54 |
| liferay | digital_experience_platform | 7.4:update55 |
| liferay | digital_experience_platform | 7.4:update56 |
| liferay | digital_experience_platform | 7.4:update57 |
| liferay | digital_experience_platform | 7.4:update58 |
| liferay | digital_experience_platform | 7.4:update59 |
| liferay | digital_experience_platform | 7.4:update70 |
| liferay | digital_experience_platform | 7.4:update71 |
| liferay | digital_experience_platform | 7.4:update72 |
| liferay | digital_experience_platform | 7.4:update73 |
| liferay | digital_experience_platform | 7.4:update74 |
| liferay | digital_experience_platform | 7.4:update75 |
| liferay | digital_experience_platform | 7.4:update76 |
| liferay | digital_experience_platform | 7.4:update77 |
| liferay | digital_experience_platform | 7.4:update78 |
| liferay | digital_experience_platform | 7.4:update79 |
| liferay | digital_experience_platform | 7.4:update80 |
| liferay | digital_experience_platform | 7.4:update81 |
| liferay | digital_experience_platform | 7.4:update82 |
| liferay | digital_experience_platform | 7.4:update83 |
| liferay | digital_experience_platform | 7.4:update84 |
| liferay | digital_experience_platform | 7.4:update85 |
| liferay | digital_experience_platform | 7.4:update86 |
| liferay | digital_experience_platform | 7.4:update87 |
| liferay | digital_experience_platform | 7.4:update88 |
| liferay | digital_experience_platform | 7.4:update89 |
| liferay | digital_experience_platform | 7.4:update90 |
| liferay | digital_experience_platform | 7.4:update91 |
| liferay | digital_experience_platform | 7.4:update92 |
| liferay | digital_experience_platform | 2023.q3.1:q3.1 |
| liferay | digital_experience_platform | 2023.q3.2:q3.2 |
| liferay | digital_experience_platform | 2023.q3.3:q3.3 |
| liferay | digital_experience_platform | 2023.q3.4:q3.4 |
| liferay | digital_experience_platform | 2023.q3.5:q3.5 |
| liferay | digital_experience_platform | 2023.q3.6:q3.6 |
| liferay | digital_experience_platform | 2023.q3.7:q3.7 |
| liferay | digital_experience_platform | 2023.q3.8:q3.8 |
| liferay | digital_experience_platform | 2023.q3.9:q3.9 |
| liferay | digital_experience_platform | 2023.q3.10:q3.10 |
| liferay | digital_experience_platform | 2023.q4.0:q4.0 |
| liferay | digital_experience_platform | 2023.q4.1:q4.1 |
| liferay | digital_experience_platform | 2023.q4.2:q4.2 |
| liferay | digital_experience_platform | 2023.q4.3:q4.3 |
| liferay | digital_experience_platform | 2023.q4.4:q4.4 |
| liferay | digital_experience_platform | 2023.q4.5:q4.5 |
| liferay | digital_experience_platform | 2023.q4.6:q4.6 |
| liferay | digital_experience_platform | 2023.q4.7:q4.7 |
| liferay | digital_experience_platform | 2023.q4.8:q4.8 |
| liferay | digital_experience_platform | 2023.q4.9:q4.9 |
| liferay | digital_experience_platform | 2023.q4.10:q4.10 |
| liferay | liferay_portal | 7.4.3.35 ≤ 𝑥 < 7.4.3.112 |
𝑥
= Vulnerable software versions