VULNERABILITY INTELLIGENCE

CVE-2021-29039

CVSS score6.1 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2021-05-16
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references