Description
Insufficient sanitization policy in HCL Leap
allows client-side script injection in the deployed application through the
HTML widget.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.6 | — |
Medium · 6.3
CVE-2024-30113
EUVD-2024-28049GHSA-xj3r-qq7w-cg2x
HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by HCL