HCL Connections Docs is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary code. This may lead to credentials disclosure and possibly launch additional attacks.
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0108427