CVE-2019-4090: Hcltech Marketing Campaign

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

"HCL Campaign is vulnerable to cross-site scripting when a user provides XSS scripts in Campaign Description field."

Affected products

• Hcltech Marketing Campaign: from 10.1.0, before 10.1.0.3 (fixed in 10.1.0.3); from 11.1.0, before 11.1.0.2 (fixed in 11.1.0.2); version 11.0.1 only

Published 2020-07-17. Last modified 2026-06-17.