A vulnerability was found in HCL Unica Campaign up to 12.1.10. It has been classified as problematic. This impacts an unknown function of the component HTTP Request Handler. Performing manipulation results in cross site scripting.

This vulnerability is known as CVE-2025-31994. Remote exploitation of the attack is possible. No exploit is available.