CVE-2025-62264 | Liferay Portal/DXP Languauge Override cross site scripting

October 31, 2025 Yanac

A vulnerability labeled as problematic has been found in Liferay Portal and DXP. Affected by this vulnerability is an unknown functionality of the component Languauge Override. The manipulation of the argument _com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_selectedLanguageId results in cross site scripting.

This vulnerability was named CVE-2025-62264. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More