Azeus Convene Board Management Portal
Monthly
Reflected cross-site scripting in the REDIRECT_URL parameter of /jsp/ge/dummy_launcher.jsp in Azeus Convene Board Management Portal 7.0.2.7_3 p72 lets an attacker who can induce a low-privileged portal user to follow a crafted link execute script in that user's browser session; the CVSS 4.0 score is 2.0 and the independent assessment scores it CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. A public PoC reference exists (a GitHub gist) but is not verified as working exploit code, no active exploitation is confirmed, and the vuln.today priority is monitor. The vendor was contacted and did not respond, so no fixed version is identified in the supplied data.
Reflected cross-site scripting in the REDIRECT_URL parameter of /jsp/ge/dummy_launcher.jsp in Azeus Convene Board Management Portal 7.0.2.7_3 p72 lets an attacker who can induce a low-privileged portal user to follow a crafted link execute script in that user's browser session; the CVSS 4.0 score is 2.0 and the independent assessment scores it CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. A public PoC reference exists (a GitHub gist) but is not verified as working exploit code, no active exploitation is confirmed, and the vuln.today priority is monitor. The vendor was contacted and did not respond, so no fixed version is identified in the supplied data.