Description
(CVE-2025-4388)Liferay Portal及DXP反射型跨站脚本漏洞
(CVE-2025-4388)Liferay Portal及DXP反射型跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://dev.liferay.com/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-4388
https://nvd.nist.gov/vuln/detail/CVE-2025-4388
https://www.cve.org/CVERecord?id=CVE-2025-4388
https://bugcrowd.com/disclosures/7e4f036b-c115-4ca3-9090-96947eaaf61f/cve-2025-4388-reflected-xss-in-marketplace-app-manager-web
https://docs.indusface.com/en/article/multiple-xss-vulnerabilities-in-liferay-portal-dxp-analysis
https://www.miggo.io/vulnerability-database/cve/CVE-2025-4388
https://www.sentinelone.com/vulnerability-database/cve-2025-4388/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4388.yaml
https://doordiefordream.medium.com/how-i-found-the-cve-2025-4388-5f10d0b28e71
https://cn-sec.com/archives/4138527.html
https://cve.imfht.com/detail/CVE-2025-4388?lang=en
https://liferay.dev/w/cve-2025-4388
https://www.tenable.com/cve/CVE-2025-4388