High severity7.6NVD Advisory· Published Mar 19, 2026· Updated Jun 17, 2026

CVE-2024-42210

Description

A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower. Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.

Affected products

HCL Software/Marketing Operationscpe-rescue
Range: <= 12.1.8
HCLTech/Unica Plan
cpe:2.3:a:hcltech:unica:*:*:*:*:*:*:*:*
Range: <12.1.9
HCL Software/Unicallm-create
Range: <=12.1.8
HCL Software/Unica Marketing Operationsllm-create
Range: <=12.1.8

Patches

Vulnerability mechanics

References

support.hcl-software.com/csmnvdVendor Advisory
github.com/MarioTesoro/vulnerability-research/blob/main/CVE-2024-42210/README.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000