Hyland Enterprise Search version 11.2.2 suffers from a persistent cross site scripting vulnerability.