A vulnerability was found in HCL Digital Experience 8.5/9.0/9.5. It has been classified as problematic. The affected element is an unknown function of the component Administrative UI. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2025-31988. It is possible to initiate the attack remotely. There is no exploit available.