No action shall be maintained to enforce any liability created under Section 25504.2 unless brought within one year after the discovery of the facts constituting the violation, or after such discovery should have been made by the exercise of reasonable diligence. In no event shall any such action be brought more than three years after the act or transaction constituting the violation.