Description
Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary code via missing directives
Medium · 5.5
CVE-2025-63401
EUVD-2025-201093GHSA-wr7p-c6qf-9585
Cross Site Scripting vulnerability in HCL Technologies Limited HCLTech DRAGON before v.7.6.0 allows a remote attacker to execute arbitrary …
Published Dec 3, 2025 · Updated Jul 5, 2026 · Assigned by mitre