com.liferay:com.liferay.layout.admin.web vulnerabilities (Maven)

3 vulnerabilities.

• com.liferay:com.liferay.layout.admin.web Maven Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter CVE-2025-62253 Fix available 6.9 MediumOctober 27, 2025
• com.liferay:com.liferay.layout.admin.web Maven Liferay Portal Stored Cross-Site Scripting Vulnerability via GroupPagesPortlet_type Parameter CVE-2025-43755 Fix available 5.1 MediumAugust 21, 2025
• com.liferay:com.liferay.layout.admin.web Maven Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) CVE-2021-38265 Fix available 5.4 MediumMarch 2, 2022