Description
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Digital Experience | 8.5, 9.0, 9.5 | — |
Low · 2.0
CVE-2022-38653
EUVD-2022-41226GHSA-63gh-hfrq-8rph
HCL Digital Experience is susceptible to cross-site scripting (XSS)
Published Dec 15, 2022 · Updated Apr 18, 2025 · Assigned by HCL