Reprise License Manager Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Reprise License Manager version 14.2. The issue occurs in the '/goform/activate_process' endpoint, where the 'akey' parameter is vulnerable to script injection.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to the '/goform/activate_process' endpoint. Include a script payload in the 'akey' parameter. The injected script will be executed, demonstrating the cross-site scripting vulnerability.