CVEvulnerability

CVE-2025-52654

4.6 MEDIUM Published 2025-10-03 Modified 2026-10-08 Official page ↗
Status
Modified
Published
2025-10-03
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-80

Description

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation.

Affected configurations

• hcltech dryice myxalytics 6.6

Related

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References