Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject.
- http://sourceforge.net/project/shownotes.php?release_id=252060
No PoCs found on GitHub currently.