CVE-2025-43774 – Liferay Portal Liferay DXP Reflected Cross-Site Scripting (XSS)

CVE ID : CVE-2025-43774

Published : Sept. 9, 2025, 12:26 a.m. | 28 minutes ago

Description : A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user’s browser.

Severity: 2.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…