GCVE-110-CERTCC-2009-750796

Advisory Published

Vulnetix · Advisory published January 5, 2010

Liferay Portal is vulnerable to persistent cross-site scripting via the p_p_id parameter, which can allow a remote, unauthenticated attacker to execute arbitrary script in the context of the portal administrator.

Download JSON Open in Console

Risk Scores

certcc-cam

impact8population10exploitation0widely_known8score_current8.64ease_of_exploitation18

certcc-vrda

d1_impact2d1_population2d1_direct_report1

Aliases

CVE-2009-3742

References

Liferay Portal p_p_id parameter vulnerable to persistent cross-site scripting

url

Liferay Portal p_p_id parameter vulnerable to persistent cross-site scripting

url

Liferay Portal p_p_id parameter vulnerable to persistent cross-site scripting

advisory

Browse GCVE Records

74,132 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON