medium4.9
CVE-2025-31988
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
Impact
HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hcltech | Digital Experience | Versions 8.5, 9.0, 9.5 |