CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.

Score

CVSS 3.1 5.4 Medium

Status

Modified - psirt@hcl.com

Published

2022-12-19

Last modified

2025-04-18

Weaknesses

CWE-79

Affected products

• Hcl Digital Experience (Hcl Software)
• Digital Experience (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0102141