Design/Logic Flaw

REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values...

CVE-2019-17121

REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values...

PT-2019-14959

Name of the Vulnerable Software and Affected Versions REDCap versions prior to 9.3.4 Description The issue concerns a problem with the Customize & Manage Locking/E-signatures page, where it is possible to perform XSS attacks via Lock Record Custom Text values. Recommendations For versions prior t...