CVE-2023-33943
- Source
- https://cve.org/CVERecord?id=CVE-2023-33943
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-33943.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-33943
- Aliases
- Published
- 2023-05-24T15:15:09.897Z
- Modified
- 2026-07-08T06:15:00.578985535Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Cross-site scripting (XSS) vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's (1) First Name, (2) Middle Name, (3) Last Name, or (4) Job Title text field.
- Database specific
{ "unresolved_ranges": [ { "source": "CPE_STRING", "cpes": [ "cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*" ], "vendor_product": "liferay:digital_experience_platform", "extracted_events": [ { "introduced": "7.4-update21" }, { "last_affected": "7.4-update21" }, { "introduced": "7.4-update22" }, { "last_affected": "7.4-update22" }, { "introduced": "7.4-update23" }, { "last_affected": "7.4-update23" }, { "introduced": "7.4-update24" }, { "last_affected": "7.4-update24" }, { "introduced": "7.4-update25" }, { "last_affected": "7.4-update25" }, { "introduced": "7.4-update26" }, { "last_affected": "7.4-update26" }, { "introduced": "7.4-update27" }, { "last_affected": "7.4-update27" }, { "introduced": "7.4-update28" }, { "last_affected": "7.4-update28" }, { "introduced": "7.4-update29" }, { "last_affected": "7.4-update29" }, { "introduced": "7.4-update30" }, { "last_affected": "7.4-update30" }, { "introduced": "7.4-update31" }, { "last_affected": "7.4-update31" }, { "introduced": "7.4-update32" }, { "last_affected": "7.4-update32" }, { "introduced": "7.4-update33" }, { "last_affected": "7.4-update33" }, { "introduced": "7.4-update34" }, { "last_affected": "7.4-update34" }, { "introduced": "7.4-update35" }, { "last_affected": "7.4-update35" }, { "introduced": "7.4-update36" }, { "last_affected": "7.4-update36" }, { "introduced": "7.4-update37" }, { "last_affected": "7.4-update37" }, { "introduced": "7.4-update38" }, { "last_affected": "7.4-update38" }, { "introduced": "7.4-update39" }, { "last_affected": "7.4-update39" }, { "introduced": "7.4-update40" }, { "last_affected": "7.4-update40" }, { "introduced": "7.4-update41" }, { "last_affected": "7.4-update41" }, { "introduced": "7.4-update42" }, { "last_affected": "7.4-update42" }, { "introduced": "7.4-update43" }, { "last_affected": "7.4-update43" }, { "introduced": "7.4-update44" }, { "last_affected": "7.4-update44" }, { "introduced": "7.4-update45" }, { "last_affected": "7.4-update45" }, { "introduced": "7.4-update46" }, { "last_affected": "7.4-update46" }, { "introduced": "7.4-update47" }, { "last_affected": "7.4-update47" }, { "introduced": "7.4-update48" }, { "last_affected": "7.4-update48" }, { "introduced": "7.4-update49" }, { "last_affected": "7.4-update49" }, { "introduced": "7.4-update50" }, { "last_affected": "7.4-update50" }, { "introduced": "7.4-update51" }, { "last_affected": "7.4-update51" }, { "introduced": "7.4-update52" }, { "last_affected": "7.4-update52" }, { "introduced": "7.4-update53" }, { "last_affected": "7.4-update53" }, { "introduced": "7.4-update54" }, { "last_affected": "7.4-update54" }, { "introduced": "7.4-update55" }, { "last_affected": "7.4-update55" }, { "introduced": "7.4-update56" }, { "last_affected": "7.4-update56" }, { "introduced": "7.4-update57" }, { "last_affected": "7.4-update57" }, { "introduced": "7.4-update58" }, { "last_affected": "7.4-update58" }, { "introduced": "7.4-update59" }, { "last_affected": "7.4-update59" }, { "introduced": "7.4-update60" }, { "last_affected": "7.4-update60" }, { "introduced": "7.4-update61" }, { "last_affected": "7.4-update61" }, { "introduced": "7.4-update62" }, { "last_affected": "7.4-update62" } ] } ] }- References