Skip to content
OpenAdvisories
High · 7.6 CVE-2024-42210 EUVD-2024-55477GHSA-3rg6-p53x-xjw5

HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability

Published Mar 19, 2026 · Updated Mar 23, 2026 · Assigned by HCL

Description

A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower.  Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.

Affected products

VendorProductAffectedFixed
HCLSoftware Unica Marketing Operations (Plan) <= 12.1.8 —

References