CVE-2022-44759

HCL Leap is affected by Cross-site scripting (XSS) PUBLISHED

Description (CNA)

Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.

Vendor / product	Versions
HCL Software / HCL Leap	affected 9.0 - 9.3

CWE-79

CISA-ADP

No English description supplied.

No references supplied.