Description
Liferay Portal/DXP存在XSS漏洞,攻击者可以注入参数获取用户敏感信息。
Liferay Portal/DXP存在XSS漏洞(CVE-2025-4576)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-4576
https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2025-4576
https://github.com/advisories/GHSA-6qcg-28jh-hm7r
https://www.acunetix.com/vulnerabilities/web/liferay-dxp-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-2025-4576/
https://pentest-tools.com/vulnerabilities-exploits/liferay-portal-and-dxp-cross-site-scripting_29080
https://www.invicti.com/web-application-vulnerabilities/liferay-dxp-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-cve-2025-4576
https://ddpoc.com/DVB-2026-11029.html