EDB-49091

PoC

LifeRay 7.2.1 GA2 - Stored XSS

view exploit source exploit_dbtype webappsauthor 3ndG4mepublished 2020-11-23catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-7934USmedium5.4Exploit
In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue.…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan