CVE-2021-27746

"HCL Connections Security Update for Reflected Cross-Site Scripting XSS Vulnerability"...

CVE-2021-27746

"HCL Connections Security Update for Reflected Cross-Site Scripting XSS Vulnerability"...

CVE-2021-27746

HCL Connections has a reflected XSS vulnerability (CVE-2021-27746) due to insufficient validation of client-side data in the web application. The issue enables attacker-controlled script execution in the user's browser, with CVSSv3.1 base score 5.4 (MEDIUM) and CVSSv2 base score 3.5 (LOW) in repo...