CVE-2023-37538 (published 2023-10-11T12:53:10.796Z)
HCL Digital Experience is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a crafted URL from some delivery mechanism (email, other web site).

Affected products: Vendor: HCL Software
Product: Digital Experience
Versions: 8.5, 9.0, 9.5