CVE-2011-1504

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x...

3.5 Low

CVE-2011-1504 is a low vulnerability (CVSS 3.5) in Liferay Portal, published May 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. No source names a fixed version.

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.

Exploit likelihood

0.99%Down 0.2 points since Feb 4, 2022

What each source reports

NVD Score used 3.5

Record: CVE-2011-1504
CVSS 2.0: 3.5 LowAV:N/AC:M/Au:S/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-1504
Updated: 2026-11-02

EUVDEUVD-2011-1505 No score

Record: EUVD-2011-1505
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qfqc-cj76-7mqj No score

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x...

Record: GHSA-qfqc-cj76-7mqj
Weakness: CWE-79
Updated: 2026-11-02

Affected products

liferay portal

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

History

References