Unrated severityNVD Advisory· Published Mar 19, 2026· Updated Mar 23, 2026
HCL Unica Marketing Operations v12.1.8 and lower is affected by a Stored cross-site scripting (XSS) vulnerability
CVE-2024-42210
Description
A Stored cross-site scripting (XSS) vulnerability affects HCL Unica Marketing Operations v12.1.8 and lower. Stored cross-site scripting (also known as second-order or persistent XSS) arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way.
Affected products
2- Range: <=12.1.8
- HCLSoftware/Unica Marketing Operations (Plan)v5Range: <= 12.1.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.