HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS attack.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14223
Reference (s):
- https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645
- URL: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0082645

