Reflected Cross-Site Scripting Vulnerability in HCL Unica Campaign

CVE-2025-31994

What is CVE-2025-31994?

HCL Unica Campaign version 12.1.10 is susceptible to a reflected XSS vulnerability. This issue arises when an attacker injects a malicious script into an HTTP request, which is subsequently reflected in the server's immediate response. This allows the script to execute in the victim's browser as though it came from a trusted source, potentially compromising user data and increasing the risk of further attacks.

References