CVE-2019-4090

CVE-2019-4090 affects HCL Campaign. The connected sources confirm a cross-site scripting vulnerability in the Campaign Description field, with exploitation leading to injection of malicious code. CNVD details affected versions: 10.1.x, 11.0.1, and 11.1.0.x. The root cause is an XSS flaw in the de...

CVE-2019-4091

CVE-2019-4091 relates to cross-site scripting in HCL Marketing Platform, specifically during addition of new users and while searching for users in the Dashboard. The available documents state an attacker could inject malicious code, but no explicit affected versions, root cause analysis, exploit...