Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-42119.json"