[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-43821":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":10,"cwes":11,"cpes":13,"technologies":219,"references":222,"score":227,"epss_score":228,"epss_percentile":229,"is_kev":10,"cisa_kev_date_added":230,"cisa_kev_due_date":230,"cisa_ssvc":231,"attack_mappings":241,"exploits":242},66203,"CVE-2025-43821","EUVD-2025-33173","Liferay Portal is vulnerable to XSS through its Commerce Product's Name text field\n\nCross-site Scripting (XSS) vulnerability in the Commerce Product Comparison Table widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Commerce Product's Name text field.","2025-10-08T15:32:00Z",{},false,[12],"CWE-79",[14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218],"cpe:2.3:a:liferay:digital_experience_platform:7.4:update50:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update6:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update90:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.95:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update20:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.8:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.91:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.72:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.103:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.56:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.32:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.90:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update58:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.47:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.54:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.35:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update78:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update86:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.66:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update65:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.9:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update68:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.51:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update76:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.15:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.105:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.41:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.4:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.89:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.88:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update59:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update12:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.25:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.71:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.99:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.106:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.104:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update7:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.10:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.16:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update34:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update14:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update54:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.53:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update73:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update45:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.96:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.12:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update29:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update63:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update37:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.59:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update79:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update87:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.48:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.73:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.80:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update38:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update82:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update61:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.64:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.102:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update17:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update3:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update89:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.85:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update77:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.83:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update69:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update31:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update44:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.100:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update9:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.62:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update41:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.61:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.70:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.97:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.82:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update36:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update5:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.63:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:-:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update22:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update46:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.5:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.28:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update66:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.1:-:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.84:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.24:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.26:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.27:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update8:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.101:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update2:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update60:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.42:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.22:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update42:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.110:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update18:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update13:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.67:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update48:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.92:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update84:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.58:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.38:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.79:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.86:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.19:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.87:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update71:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update62:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update4:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.44:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update27:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.14:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.40:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update57:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update33:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.20:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update1:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.13:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update19:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update32:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update35:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update15:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update67:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update53:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.17:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.75:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update23:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.55:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.77:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update52:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.31:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update30:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.30:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.74:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.57:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.109:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update25:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update80:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update39:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.36:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.39:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update74:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:*:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.37:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update92:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update83:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.11:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.49:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update51:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.33:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.69:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.29:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.45:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.50:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update11:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update81:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update72:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update16:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update91:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.65:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.108:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update26:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update49:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.52:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.60:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.76:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.81:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update47:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update21:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update40:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.94:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update64:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.111:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.21:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.78:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.6:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update56:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.43:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.7:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update24:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update70:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update10:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update28:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.18:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.23:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.68:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.46:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update88:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.98:*:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update43:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update75:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update55:*:*:*:*:*:*","cpe:2.3:a:liferay:digital_experience_platform:7.4:update85:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.107:*:*:*:*:*:*:*","cpe:2.3:a:liferay:liferay_portal:7.4.3.34:*:*:*:*:*:*:*",[220,221],"Liferay Liferay Portal","Liferay Digital Experience Platform",[223,224,225,226],"https:\u002F\u002Fliferay.dev\u002Fportal\u002Fsecurity\u002Fknown-vulnerabilities\u002F-\u002Fasset_publisher\u002Fjekt\u002Fcontent\u002FCVE-2025-43821","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-43821","https:\u002F\u002Fgithub.com\u002Fliferay\u002Fliferay-portal\u002Fcommit\u002F433f82c03fac10167f1f811efb482d6010bac6db","https:\u002F\u002Fgithub.com\u002Fliferay\u002Fcom-liferay-commerce",0,0.00222,0.12596,null,{"timestamp":232,"automatable":233,"tech_impact":234,"exploitation":235,"cisa_decision":236,"cisa_remediation_timeline":240},"2025-10-08T13:08:44.230119Z","no","partial","none",{"vector":237,"decision":238,"priority":239},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T19:43:02.516591\u002F","track_star","medium","60D",[],[]]