CVE-2025-31988

Description

HCL Digital Experience is susceptible to cross site scripting (XSS) in an administrative UI with restricted access.

PUBLISHED Reserved 2025-04-01 | Published 2025-08-19 | Updated 2025-08-19 | Assigner HCL

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

References

support.hcl-software.com/...rticle&sysparm_article=KB0123435

cve.org (CVE-2025-31988)

nvd.nist.gov (CVE-2025-31988)

Download JSON