CVE-2022-38653 In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded

Description

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HCL Digital Experience	Versions non publiées

Autres CVE de HCL Digital Experience

Les 4 CVE de HCL Digital Experience →

CVE-2025-0254 HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to… 5.9 Moyenne CVE-2022-38662  In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites 6.1 Moyenne CVE-2021-27774 User input included in error response, which could be used in a phishing attack 3.1 Faible