CVE-2008-0180

Published: Feb 5, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in themes/_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users to inject arbitrary web script or HTML via the Greeting field in a User Profile.

Affected (12)

Products: Liferay: Liferay Enterprise Portal

Liferay

1 product

Liferay Enterprise Portal

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Liferay Liferay Enterprise Portal	All versions
Liferay Liferay Enterprise Portal	Version 1.0
Liferay Liferay Enterprise Portal	Version 2.0
Liferay Liferay Enterprise Portal	Version 2.1.0
Liferay Liferay Enterprise Portal	Version 2.1.1
Liferay Liferay Enterprise Portal	Version 2.2.0
Liferay Liferay Enterprise Portal	Version 3.6.1
Liferay Liferay Enterprise Portal	Version 4.1.1
Liferay Liferay Enterprise Portal	Version 4.1.3
Liferay Liferay Enterprise Portal	Version 4.1
Liferay Liferay Enterprise Portal	Version 4.3.1
Liferay Liferay Enterprise Portal	Version 4.3.6