{"action":"Upgrade com.liferay:com.liferay.account.admin.web to 2.0.108 or later.","affected":[{"fixed":"2.0.108","introduced":"2.0.0"}],"component":"com.liferay:com.liferay.account.admin.web","cve_ids":["CVE-2025-62263"],"ecosystem":"Maven","epss":0.0022,"exploited":false,"fixed_versions":["2.0.108"],"ghsa_id":"GHSA-8mgf-rgg5-w38q","id":"tcs_01M5N8N1ZZ6ZH0S7HEAVMZ9K5S","modified_at":"2025-11-15T02:41:06.992358Z","published_at":"2025-10-27T21:30:27Z","references":["https://osv.dev/vulnerability/GHSA-8mgf-rgg5-w38q","https://nvd.nist.gov/vuln/detail/CVE-2025-62263","https://github.com/liferay/liferay-portal/commit/13571a47fd59dcb5f52d938df82960b3421b51b2","https://github.com/liferay/liferay-portal/commit/842c142d87d0187ea2af19ee79dd1694fd46d72b","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-17861","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62263"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-8mgf-rgg5-w38q","url":"https://osv.dev/vulnerability/GHSA-8mgf-rgg5-w38q"}],"summary":"Liferay Portal Vulnerable to Cross-Site Scripting"}