← All advisories

Unrated severityNVD Advisory· Published Dec 15, 2022· Updated Apr 18, 2025

HCL Digital Experience is susceptible to cross-site scripting (XSS)

CVE-2022-38653

Description

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

Affected products

2

HCL Software/Digital Experiencellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 8.5, 9.0, 9.5

Patches

Vulnerability mechanics

References

1

support.hcltechsw.com/csmmitre

News mentions

0

No linked articles in our index yet.