Description
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HCL Software | Digital Experience | 8.5, 9.0, 9.5 | — |
Medium · 4.9
CVE-2025-31988
EUVD-2025-25205GHSA-hvm6-6m6r-3c5m
HCL Digital Experience is susceptible to cross site scripting (XSS)
Published Aug 19, 2025 · Updated Aug 19, 2025 · Assigned by HCL