Action Network, CVE-2024-25921

CVE, Research URL: CVE-2024-25921
Home page URL: Security reports for Action Network
Application: Action Network
Published on: Mar 15, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Concerted Action Action Network allows Reflected XSS.This issue affects Action Network: from n/a through 1.4.2.
Affected versions: Min -, max 1.4.3.
Status: vulnerable