8.1
High
CVE-2023-37501 A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign
Description
A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign. An attacker could hijack a user's session and perform other attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HCL Unica Campaign 12.1 | earliest → < 12.1.3 | 12.1.3 |