HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')