A cross-site scripting (XSS) vulnerability exists in Convene Azeus Convene Board Management Portal version 7.0.2.7_3 p72. The flaw is due to improper handling of the REDIRECT_URL argument in the /jsp/ge/dummy_launcher.jsp file, allowing remote attackers to execute script code. The vulnerability has a low CVSS score of 3.5 and requires low privileges with user interaction. The vendor has not responded to the disclosure, and no patch information is available.