CVE-2022-27546

CVE-2022-27546 affects HCL iNotes with a Reflected Cross-site Scripting (XSS) vulnerability caused by improper validation of user-supplied input in a form POST request. A remote attacker could lure a victim to a specially-crafted URL to run script in the site’s context and potentially steal cooki...