CVE-2024-37395

creationtimestamp| type| source ---|---|--- 2025-06-10 17:32:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17935 2025-06-10 17:32:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17939 2025-06-11 15:31:59+00:00| seen|...

CVE-2024-37395

A stored cross-site scripting XSS vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a crafted payload into the 'Survey Title' and 'Survey Instructions' fields. This vulnerability could be exploited by...