Description
Insufficient sanitization in HCL Leap allows
client-side script injection in the authoring environment.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.6 | — |
Low · 3.7
CVE-2024-30114
EUVD-2024-28050GHSA-7qm6-898w-x6x4
HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by HCL