A reflected cross-site scripting (XSS) vulnerability exists in Liferay Portal versions 7.4.0 through 7.4.3.132 and Liferay DXP versions 2025.Q2.0 through 2025.Q2.8, among others. This vulnerability allows a remote authenticated user to inject JavaScript code via the _com_liferay_expando_web_portlet_ExpandoPortlet_displayType parameter. It poses a medium severity risk due to its potential impact on confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-43738 |
Exploitation
To exploit this vulnerability, an attacker must be a remote authenticated user who can manipulate the _com_liferay_expando_web_portlet_ExpandoPortlet_displayType parameter. By injecting malicious JavaScript code into this parameter, the attacker can execute scripts in the context of the victim’s session, potentially leading to unauthorized actions or data exposure.
Affected Products
- Liferay Portal 7.4.0 to 7.4.3.132: A widely used platform for building web applications.
- Liferay DXP 2025.Q2.0 to 2025.Q2.8: The enterprise version of Liferay Portal with additional features.
- Liferay DXP 2025.Q1.0 to 2025.Q1.15: Earlier releases of the enterprise version.
- Liferay DXP 2024.Q4.0 to 2024.Q4.7: Previous quarterly updates of the DXP version.
- Liferay DXP 2024.Q3.1 to 2024.Q3.13: Another set of quarterly updates.
- Liferay DXP 2024.Q2.1 to 2024.Q2.13: Further quarterly updates.
- Liferay DXP 2024.Q1.1 to 2024.Q1.19: Initial quarterly updates for 2024.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest versions of Liferay Portal and Liferay DXP that address this XSS issue. Additionally, implementing input validation and sanitization measures can help prevent the injection of malicious scripts.