CVE-2020-4081 In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS)

Description

In Digital Experience 8.5, 9.0, and 9.5, WSRP consumer is vulnerable to cross-site scripting (XSS).

Affected products and versions

Product	Affected versions	Fixed in
HCL Digital Experience	9.5	No fix stated
HCL Digital Experience	9.0	No fix stated
HCL Digital Experience	8.5	No fix stated

Other CVEs of HCL Digital Experience

The 5 CVEs of HCL Digital Experience →

CVE-2020-14255 HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties… Not rated CVE-2020-14221 HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users Not rated CVE-2020-14222 HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS) Not rated CVE-2020-14223 HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS) Not rated