low2.0
CVE-2022-38653
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
Impact
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Digital Experience | Versions 8.5, 9.0, 9.5 |