CVE-2022-42119

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-11-15

Last modified

2026-07-09

Weaknesses

CWE-79

Affected products

• Dxp (Liferay)
• Liferay Portal (Liferay)

References

• https://issues.liferay.com/browse/LPE-17632
• https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119