Cross site scripting

2019-08-2119:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.

CPENameOperatorVersion
redcaplt9.3.0

CPE	Name	Operator	Version
	redcap	lt	9.3.0

References

www.evms.edu/research/resources_services/redcap/redcap_change_log/