CVE-2025-43740

Maven/com.liferay.portal:release.portal.bom CVE-2025-43740: medium 5.4, EPSS 0.21%

Liferay Portal has Stored Cross-Site Scripting Vulnerability via Message Boards Feature

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-22jp-w3cg-gvmm
• nvd: CVE-2025-43740
• https://github.com/liferay/liferay-portal/commit/32821b41f7f62271d1fb9d56c82297cd087780a4
• https://github.com/liferay/liferay-portal/commit/51e21fa8b3e8b49ed455caeab192c5bba7e15b6d
• https://github.com/liferay/liferay-portal/commit/c1b7c6b58f5042072c381fc2664e808ebb745826
• https://github.com/liferay/liferay-portal
• https://liferay.atlassian.net/browse/LPE-18276
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43740

CVE-2025-43740 · published 2025-08-19T15:31:28Z · modified 2025-08-19T22:42:19.609439Z · JSON