Total vulnerabilities in the database
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).
| Software | From | Fixed in |
|---|---|---|
| hcltech / digital_experience | 9.0 | 9.0.x |
| hcltech / digital_experience | 9.5 | 9.5.x |
| hcltech / digital_experience | 8.5 | 8.5.x |