Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-0317
http://www.securitytracker.com/id/1037383