HTML Injection Vulnerability in HCL Unica MaxAI Assistant

CVE-2025-31992

What is CVE-2025-31992?

HCL Unica MaxAI Assistant has a vulnerability that allows attackers to exploit HTML injection. This vulnerability enables an attacker to insert malicious HTML characters into the application, which are then executed on the client-side. Such an attack puts users' session data at risk by potentially allowing unauthorized actions or data exposure within the context of their interactions. This situation emphasizes the importance of secure coding practices and regular security assessments.

References