Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-29044

Cross-site scripting (XSS) vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_my_sites_web_portlet_MySitesPortlet_comments parameter.

Published

2021-05-17T11:15:07.210

Last Modified

2025-05-13T18:17:51.450

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-79

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.0	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.1	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	digital_experience_platform	7.2	Yes
Application	liferay	dxp	7.3	Yes
Application	liferay	liferay_portal	≤ 7.3.5	Yes

References

http://liferay.com Vendor Advisory ([email protected])
https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743548 Vendor Advisory ([email protected])
http://liferay.com Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120743548 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)