Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-81345
HistoryApr 15, 2022 - 12:00 a.m.

REDCap Cross-Site Scripting Vulnerability (CNVD-2022-81345)

2022-04-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.13 Low

EPSS

Percentile

95.5%

A cross-site scripting vulnerability exists in versions of REDCap prior to 11.4.0, which stems from a lack of data validation filtering of user-supplied data and output in the missing data code functionality of the program. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
redcap redcaplt11.4.0

0.13 Low

EPSS

Percentile

95.5%