{"action":"Upgrade com.liferay:com.liferay.frontend.taglib to 2.1.3 or later.","affected":[{"fixed":"2.1.3","introduced":"0"}],"component":"com.liferay:com.liferay.frontend.taglib","cve_ids":["CVE-2017-12648"],"ecosystem":"Maven","epss":0.00744,"exploited":false,"fixed_versions":["2.1.3"],"ghsa_id":"GHSA-cm99-x97g-9qx8","id":"tcs_01M5N8SPM7AFRD5VPWW28T1XF9","modified_at":"2025-07-18T20:12:18.392500Z","published_at":"2022-05-17T02:15:41Z","references":["https://osv.dev/vulnerability/GHSA-cm99-x97g-9qx8","https://nvd.nist.gov/vuln/detail/CVE-2017-12648","https://github.com/brianchandotcom/liferay-portal/pull/47888","https://github.com/liferay/liferay-portal/commit/996769ea1e2be15becd90a1fcf73e704788714ac","https://github.com/liferay/liferay-portal/commit/9bc594b70c565570c7e7b7e06c0b7c141d2cc8cf","https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities","https://github.com/liferay/liferay-portal"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cm99-x97g-9qx8#Maven/com.liferay:com.liferay.frontend.taglib","url":"https://osv.dev/vulnerability/GHSA-cm99-x97g-9qx8"}],"summary":"Liferay Portal XSS Vulnerability"}