A vulnerability was found in Liferay Portal and DXP. It has been declared as problematic. Affected is an unknown function. Such manipulation of the argument _com_liferay_dynamic_data_mapping_web_portlet_DDMPortlet_definition leads to cross site scripting.
This vulnerability is documented as CVE-2025-62248. The attack can be executed remotely. There is not any exploit available.
