Skip to content
Sign in
9.3 Critical

CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)

Description

HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).

Affected products and versions

Product Affected versions Fixed in
Digital Experience Versions not published

Other CVEs of Digital Experience

The 2 CVEs of Digital Experience →
CVE-2025-31988 HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access 4.9 Medium
Track this CVE