2025-11-25 15:25:00
HCL
PUBLISHED
HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote, unauthenticated attacker can specially craft a URL to execute script in a victims Web browser within the security context of the hosting Web site and/or steal the victims cookie-based authentication credentials.