CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center PUBLISHED

Description (CNA)

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser.

Affected (CNA)

Vendor / product	Versions
HCLSoftware / DX Compose	affected 9.5

CWE

CWE-79

References

https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0130849

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.