A vulnerability was found in Liferay Portal and DXP. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/apps/blogs/blogs-web/src/main/resources/META-INF/resources/blogs/entry_cover_image_caption.jsp. The manipulation leads to cross site scripting.
This vulnerability is handled as CVE-2025-4576. The attack may be launched remotely. There is no exploit available.
