CVE-2025-62263
- Source
- https://cve.org/CVERecord?id=CVE-2025-62263
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62263.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-62263
- Aliases
- Published
- 2025-10-27T20:15:54.603Z
- Modified
- 2026-07-08T07:59:38.062559032Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Account Role’s “Title” text field to (1) view account role page, or (2) select account role page.
Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.7 through 7.4.3.103, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 service pack 3 through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an Organization’s “Name” text field to (1) view account page, (2) view account organization page, or (3) select account organization page.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.1:*:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.2:*:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.3:*:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:2023.q3.4:*:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:service_pack_3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update10:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update11:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update12:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update13:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update14:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update15:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update16:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update17:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update18:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update19:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update1:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update20:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update21:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update22:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update23:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update24:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update25:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update26:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update27:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update28:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update29:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update2:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update30:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update31:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update32:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update33:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update34:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update35:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update36:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update3:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update4:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update5:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update6:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update7:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update8:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.3:update9:*:*:*:*:*:*", "cpe:2.3:a:liferay:digital_experience_platform:7.4:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "7.3-service_pack_3" }, { "last_affected": "7.3-service_pack_3" }, { "introduced": "7.3-update1" }, { "last_affected": "7.3-update1" }, { "introduced": "7.3-update10" }, { "last_affected": "7.3-update10" }, { "introduced": "7.3-update11" }, { "last_affected": "7.3-update11" }, { "introduced": "7.3-update12" }, { "last_affected": "7.3-update12" }, { "introduced": "7.3-update13" }, { "last_affected": "7.3-update13" }, { "introduced": "7.3-update14" }, { "last_affected": "7.3-update14" }, { "introduced": "7.3-update15" }, { "last_affected": "7.3-update15" }, { "introduced": "7.3-update16" }, { "last_affected": "7.3-update16" }, { "introduced": "7.3-update17" }, { "last_affected": "7.3-update17" }, { "introduced": "7.3-update18" }, { "last_affected": "7.3-update18" }, { "introduced": "7.3-update19" }, { "last_affected": "7.3-update19" }, { "introduced": "7.3-update2" }, { "last_affected": "7.3-update2" }, { "introduced": "7.3-update20" }, { "last_affected": "7.3-update20" }, { "introduced": "7.3-update21" }, { "last_affected": "7.3-update21" }, { "introduced": "7.3-update22" }, { "last_affected": "7.3-update22" }, { "introduced": "7.3-update23" }, { "last_affected": "7.3-update23" }, { "introduced": "7.3-update24" }, { "last_affected": "7.3-update24" }, { "introduced": "7.3-update25" }, { "last_affected": "7.3-update25" }, { "introduced": "7.3-update26" }, { "last_affected": "7.3-update26" }, { "introduced": "7.3-update27" }, { "last_affected": "7.3-update27" }, { "introduced": "7.3-update28" }, { "last_affected": "7.3-update28" }, { "introduced": "7.3-update29" }, { "last_affected": "7.3-update29" }, { "introduced": "7.3-update3" }, { "last_affected": "7.3-update3" }, { "introduced": "7.3-update30" }, { "last_affected": "7.3-update30" }, { "introduced": "7.3-update31" }, { "last_affected": "7.3-update31" }, { "introduced": "7.3-update32" }, { "last_affected": "7.3-update32" }, { "introduced": "7.3-update33" }, { "last_affected": "7.3-update33" }, { "introduced": "7.3-update34" }, { "last_affected": "7.3-update34" }, { "introduced": "7.3-update35" }, { "last_affected": "7.3-update35" }, { "introduced": "7.3-update36" }, { "last_affected": "7.3-update36" }, { "introduced": "7.3-update4" }, { "last_affected": "7.3-update4" }, { "introduced": "7.3-update5" }, { "last_affected": "7.3-update5" }, { "introduced": "7.3-update6" }, { "last_affected": "7.3-update6" }, { "introduced": "7.3-update7" }, { "last_affected": "7.3-update7" }, { "introduced": "7.3-update8" }, { "last_affected": "7.3-update8" }, { "introduced": "7.3-update9" }, { "last_affected": "7.3-update9" }, { "introduced": "7.4" }, { "last_affected": "7.4" }, { "introduced": "2023.q3.1" }, { "last_affected": "2023.q3.1" }, { "introduced": "2023.q3.2" }, { "last_affected": "2023.q3.2" }, { "introduced": "2023.q3.3" }, { "last_affected": "2023.q3.3" }, { "introduced": "2023.q3.4" }, { "last_affected": "2023.q3.4" } ], "source": "CPE_STRING", "vendor_product": "liferay:digital_experience_platform" } ] }- References