Cross-Site Scripting Vulnerabilities in Liferay Portal and DXP

CVE-2025-62267

What is CVE-2025-62267?

Multiple cross-site scripting vulnerabilities within Liferay Portal and Liferay DXP allow remote attackers to exploit input fields such as First Name, Middle Name, or Last Name. By crafting specific payloads, attackers can inject malicious web scripts or HTML, potentially leading to unauthorized access and data manipulation. It is crucial for users to update to the latest versions to mitigate these risks.

References