CVE-2026-21825: HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center
Published Jun 5, 2026
·Updated
HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center. An attacker could execute arbitrary JavaScript in the victim's browser.
Affected Software
68 affected components
HCL HCL Digital Experience Compose
hcltech Digital Experience Compose=9.5
hcltech Digital Experience Compose=9.5-cf224
hcltech Digital Experience Compose=9.5-cf225
hcltech Digital Experience Compose=9.5-cf226
hcltech Digital Experience Compose=9.5-cf227
hcltech Digital Experience Compose=9.5-cf228
hcltech Digital Experience Compose=9.5-cf229
hcltech Digital Experience Compose=9.5-cf230
hcltech Digital Experience Compose=9.5-cf231
hcltech Digital Experience Compose=9.5-cf232
hcltech Digital Experience Compose=9.5-cf233
hcltech Digital Experience Compose=9.5-cf234
hcltech Digital Experience=9.5
hcltech Digital Experience=9.5-cf17
hcltech Digital Experience=9.5-cf171
hcltech Digital Experience=9.5-cf172
hcltech Digital Experience=9.5-cf173
hcltech Digital Experience=9.5-cf18
hcltech Digital Experience=9.5-cf181
hcltech Digital Experience=9.5-cf182
hcltech Digital Experience=9.5-cf183
hcltech Digital Experience=9.5-cf184
hcltech Digital Experience=9.5-cf19
hcltech Digital Experience=9.5-cf191
hcltech Digital Experience=9.5-cf192
hcltech Digital Experience=9.5-cf193
hcltech Digital Experience=9.5-cf194
hcltech Digital Experience=9.5-cf195
hcltech Digital Experience=9.5-cf196
hcltech Digital Experience=9.5-cf197
hcltech Digital Experience=9.5-cf198
hcltech Digital Experience=9.5-cf199
hcltech Digital Experience=9.5-cf200
hcltech Digital Experience=9.5-cf201
hcltech Digital Experience=9.5-cf202
hcltech Digital Experience=9.5-cf203
hcltech Digital Experience=9.5-cf204
hcltech Digital Experience=9.5-cf205
hcltech Digital Experience=9.5-cf206
hcltech Digital Experience=9.5-cf207
hcltech Digital Experience=9.5-cf208
hcltech Digital Experience=9.5-cf209
hcltech Digital Experience=9.5-cf210
hcltech Digital Experience=9.5-cf211
hcltech Digital Experience=9.5-cf212
hcltech Digital Experience=9.5-cf213
hcltech Digital Experience=9.5-cf214
hcltech Digital Experience=9.5-cf215
hcltech Digital Experience=9.5-cf216
hcltech Digital Experience=9.5-cf217
hcltech Digital Experience=9.5-cf218
hcltech Digital Experience=9.5-cf219
hcltech Digital Experience=9.5-cf220
hcltech Digital Experience=9.5-cf221
hcltech Digital Experience=9.5-cf222
hcltech Digital Experience=9.5-cf223
hcltech Digital Experience=9.5-cf224
hcltech Digital Experience=9.5-cf225
hcltech Digital Experience=9.5-cf226
hcltech Digital Experience=9.5-cf227
hcltech Digital Experience=9.5-cf228
hcltech Digital Experience=9.5-cf229
hcltech Digital Experience=9.5-cf230
hcltech Digital Experience=9.5-cf231
hcltech Digital Experience=9.5-cf232
hcltech Digital Experience=9.5-cf233
hcltech Digital Experience=9.5-cf234
Event History
Jun 5, 2026
CVE Published
via MITRE·06:03 AM
Data Sourced
via MITRE·06:03 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-21825?
CVE-2026-21825 has a severity rating of medium at 6.1.
2
What type of vulnerability is CVE-2026-21825?
CVE-2026-21825 is a reflected cross-site scripting (XSS) vulnerability.
3
Which software is affected by CVE-2026-21825?
CVE-2026-21825 affects HCL Digital Experience Compose.
4
How can an attacker exploit CVE-2026-21825?
An attacker could execute arbitrary JavaScript in the victim's browser through this vulnerability.
5
What is the impact of CVE-2026-21825 on user data?
CVE-2026-21825 can lead to potential information leakage and unauthorized actions within the compromised user's session.