CVE-2025-55273
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Mar 26, 2026
Vendor
unknown
Description
HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of the application. Malicious scripts can steal cookies or session tokens, leading to session hijacking.