Vulnerability Details CVE-2022-38653
In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.5%
CVSS Severity
CVSS v3 Score 2.0
Products affected by CVE-2022-38653
-
cpe:2.3:a:hcltech:digital_experience:8.5
-
cpe:2.3:a:hcltech:digital_experience:9.0
-
cpe:2.3:a:hcltech:digital_experience:9.5