Security concern with Mobilize function in the notes section of a constituent record.

You are able to add HTML to the notes section of a constituent record in Mobilize application.
We’re currently evaluating this issue for a fix in a future service pack.

Steps to Duplicate

1. Login to Mobilize.
2. In the note section of a constituent documentation and the comments section fo the constituent interaction screen.
3. Enter The HTML <Script> into the notes.
4. You are able to save. 

Environment

 Blackbaud CRM
 4.0
 4.0.170

Was this article helpful?