{ "schema_version": "1.4.0", "id": "GHSA-jwjh-8w87-hw74", "modified": "2022-05-24T17:33:11Z", "published": "2022-05-24T17:33:11Z", "aliases": [ "CVE-2020-14240" ], "details": "HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to execute script in a victim's Web browser within the security context of the hosting Web site and/or steal the victim's cookie-based authentication credentials.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14240" }, { "type": "WEB", "url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0084789" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2020-11-05T17:15:00Z" } }