11 matches found
CVE-2025-65270
CVE-2025-65270 โ ๏ธ Disclaimer This repository is for educational and defensive security research only ๐ฅ Overview Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3 , allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's...
CVE-2025-65270
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
CVE-2025-65270
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
CVE-2025-65270
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
CVE-2025-65270
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
CVE-2025-65270
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
ClinCapture EDC ๅฎๅ จๆผๆด
ClinCapture EDC is a clinical trial data capture system from ClinCapture, Inc. A security vulnerability exists in ClinCapture EDC versions 3.0 and 2.2.3, which originates in reflective cross-site scripting and could lead to the execution of JavaScript code by an unauthenticated, remote attacker i...
CVE-2025-65270
A reflected cross-site scripting (XSS) vulnerability exists in ClinCapture EDC versions 3.0 and 2.2.3 . This flaw allows an unauthenticated remote attacker to execute malicious JavaScript code within a victim's browser. The vulnerability is triggered by failing to properly neutralize input during...
CVE-2025-65270: Improper Neutralization of Input During Web Page Generation
Reflected cross-site scripting XSS vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser...
The vulnerability of the Clincapture EDC data collection platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.
The vulnerability of the Clincapture EDC data collection platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...
PT-2025-52667
Name of the Vulnerable Software and Affected Versions ClinCapture EDC versions 2.2.3 and 3.0 Description A reflected cross-site scripting XSS issue exists that allows a remote attacker to execute JavaScript code within a user's browser. The attacker does not need to be authenticated to exploit th...