Stored XSS Vulnerability in HCL Leap Software

CVE-2025-59848

What is CVE-2025-59848?

HCL Leap contains a vulnerability that allows Stored XSS through malicious titles in application dialogs on the Manage page. An attacker can exploit this flaw to inject harmful scripts, potentially compromising user sessions and gaining unauthorized access to sensitive data. This issue underscores the importance of sanitizing user inputs and implementing robust security measures to protect against such attacks.

References