HCL Leap Client-Side Script Injection Vulnerability

A vulnerability allowing client-side script injection has been identified in HCL Leap. This issue arises in both the authoring environment and deployed applications, through multiple vectors that permit the injection of scripts that are executed on the client side.

Impact

Exploitation of this vulnerability could lead to unauthorized script execution in the user's browser, potentially allowing for cross-site scripting (XSS) attacks or other malicious activities that could be performed through injected scripts.