← All advisories

Unrated severityNVD Advisory· Published Apr 30, 2025· Updated May 1, 2025

HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability

CVE-2024-30115

Description

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the HTML widget.

Affected products

2

Gowondesigns/Leapllm-fuzzy
HCL Software/Domino Leapcpe-rescue
Range: 1.0 - 1.0.5; 1.1 - 1.1.3

Patches

Vulnerability mechanics

References

1

support.hcl-software.com/csmmitre

News mentions

0

No linked articles in our index yet.