Security concern with Mobilize function in the notes section of a constituent record.

You are able to add HTML to the notes section of a constituent record in Mobilize application.
Download and install the latest patch, which contains all fixes from previous patches. If you are running an older version, download and install the latest version and then the patch.

Steps to Duplicate

1. Login to Mobilize.
2. In the note section of a constituent documentation and the comments section fo the constituent interaction screen.
3. Enter The HTML <Script> into the notes.
4. You are able to save. 

Environment

 Blackbaud CRM
 4.0
 4.0
 4.0.180.1600 (Service Pack 16)
 4.0.170

Was this article helpful?