CVE-2025-43735: Reflected XSS Vulnerability in Liferay Portal and Liferay DXP
Summary
CVE-2025-43735: Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability. Affects com.liferay.portal:release.portal.bom versions >= 7.4.0, < 7.4.3.132. Fixed in 7.4.3.132. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Liferay Portal is a popular open-source platform for building web applications and managing content. It provides features such as user management, content management, and collaboration tools. Liferay DXP is the enterprise version that offers additional capabilities for businesses. Both platforms are widely used for creating dynamic websites and intranets. However, they are susceptible to security vulnerabilities, including reflected cross-site scripting (XSS), which can allow attackers to inject malicious scripts into web pages.
Vulnerability Detail
A reflected cross-site scripting (XSS) vulnerability exists in Liferay Portal versions 7.4.0 through 7.4.3.131 and Liferay DXP versions 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.12. This vulnerability allows remote, non-authenticated attackers to inject JavaScript into the google_gadget, potentially leading to unauthorized actions on behalf of users, data theft, or session hijacking.
How To Fix
Latest published version: 7.4.3.132 as of 22 Oct 2026
The newest release already contains this fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider implementing input validation and sanitization on user inputs to mitigate the risk of XSS attacks. Additionally, restrict access to sensitive functionalities until the vulnerability is resolved.
Conclusion
The reflected XSS vulnerability in Liferay Portal and Liferay DXP poses a significant risk to users and applications. It is crucial to update to the latest patched versions to safeguard against potential attacks. Implementing best practices for input validation can also help mitigate risks until updates are applied.
See every vulnerability recorded for com.liferay.portal:release.portal.bom →
FAQ
Reflected XSS occurs when an attacker injects malicious scripts into a web page, which are then executed in the user's browser without being stored on the server.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your pom.xml without signup.
The impacts can include unauthorized access to user sessions, data theft, and the ability for attackers to perform actions on behalf of users.
Yes, implementing input validation and sanitization can help mitigate the risk of XSS attacks until a patch is applied.
Regularly check for vulnerabilities, especially after updates or when new vulnerabilities are disclosed. Using tools like Vulert can help automate this process.
Related vulnerabilities
Recent vulnerabilities recorded for com.liferay.portal:release.portal.bom.
