# Liferay Digital Experience Platform


- [CVE-2024-8980](https://insights.sbomify.com/CVE-2024-8980/): Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console (critical 9.6)
- [CVE-2023-42496](https://insights.sbomify.com/CVE-2023-42496/): Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting (critical 9.6)
- [CVE-2023-42498](https://insights.sbomify.com/CVE-2023-42498/): Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting (critical 9.6)
- [CVE-2024-25147](https://insights.sbomify.com/CVE-2024-25147/): Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting (critical 9.6)
- [CVE-2024-26269](https://insights.sbomify.com/CVE-2024-26269/): Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting (critical 9.6)
- [CVE-2024-25145](https://insights.sbomify.com/CVE-2024-25145/): Liferay Portal stored cross-site scripting (XSS) vulnerability (critical 9.6)
- [CVE-2023-42497](https://insights.sbomify.com/CVE-2023-42497/): Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page (critical 9.6)
- [CVE-2023-42627](https://insights.sbomify.com/CVE-2023-42627/): Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module (critical 9.6)
- [CVE-2023-44311](https://insights.sbomify.com/CVE-2023-44311/): Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class (critical 9.6)
- [CVE-2024-38002](https://insights.sbomify.com/CVE-2024-38002/): Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions (critical 9.0)
- [CVE-2023-40191](https://insights.sbomify.com/CVE-2023-40191/): Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting (critical 9.0)
- [CVE-2023-47795](https://insights.sbomify.com/CVE-2023-47795/): Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting (critical 9.0)

---
From sbomify Insights: https://insights.sbomify.com/products/liferay/digital-experience-platform/