CVE-2023-37501

A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign.  An attacker could hijack a user's session and perform other attacks.

Score

CVSS 3.1 8.1 High

Status

Modified - psirt@hcl.com

Published

2023-08-03

Last modified

2024-09-27

Weaknesses

CWE-79

Affected products

• Hcl Unica Campaign (Hcl Software)
• Unica (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106556