Skip to content
OpenAdvisories
High · 8.3 CVE-2021-27788 EUVD-2021-14529GHSA-j5qm-g7fg-7pg9

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability

Published Mar 10, 2023 · Updated Feb 27, 2025 · Assigned by HCL

Description

HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability.  By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

Affected products

VendorProductAffectedFixed
HCL Software Verse 2.x —

References