Description
Multiple vectors in HCL Leap allow client-side
script injection in the authoring environment and deployed applications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | HCL Leap | < 9.3.8 | — |
Medium · 6.5
CVE-2024-30147
EUVD-2024-28083GHSA-hhc9-9q7r-34hx
HCL Leap is affected by a cross-site scripting (XSS) vulnerability
Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by HCL