"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials."
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080512