Liferay CE versions prior to 6.2 CE GA6 suffer from a persistent cross site scripting vulnerability. Continue reading...