Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-37538

HCL Digital Experience is susceptible to cross site scripting (XSS)

Description

HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HCL Software Digital Experience

Default version status: unaffected

  • 8.5, 9.0, 9.5affected

References