{"action":"Upgrade com.liferay:com.liferay.account.admin.web to 2.0.114 or later.","affected":[{"fixed":"2.0.114","introduced":"2.0.40"}],"component":"com.liferay:com.liferay.account.admin.web","cve_ids":["CVE-2025-62238"],"ecosystem":"Maven","epss":0.00225,"exploited":false,"fixed_versions":["2.0.114"],"ghsa_id":"GHSA-xw6m-3m5q-mxpm","id":"tcs_01M5N9K2X21NG25EDKC14NSKV5","modified_at":"2025-10-11T01:57:30.031325Z","published_at":"2025-10-10T15:31:28Z","references":["https://osv.dev/vulnerability/GHSA-xw6m-3m5q-mxpm","https://nvd.nist.gov/vuln/detail/CVE-2025-62238","https://github.com/liferay/liferay-portal/commit/89a043bface29bf924e25d1c2c3b05f85d750a75","https://github.com/liferay/liferay-portal","https://liferay.atlassian.net/browse/LPE-17920","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-62238"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-xw6m-3m5q-mxpm","url":"https://osv.dev/vulnerability/GHSA-xw6m-3m5q-mxpm"},{"source":"nvd","source_id":"CVE-2025-62238","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62238"}],"summary":"Liferay Portal's Membership page is vulnerable to XSS through “name“ text field"}