CVE-2024-56312

A stored cross-site scripting XSS vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field of a Project Dashboard. When a user clicks on the project Dashboard name, the crafted payload is executed, potentially...

CVE-2024-56312

A stored cross-site scripting XSS vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field of a Project Dashboard. When a user clicks on the project Dashboard name, the crafted payload is executed, potentially...

CVE-2024-56312

creationtimestamp| type| source ---|---|--- 2024-12-22 21:18:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113698558712644437 2024-12-22 22:15:34+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwgvv64lg2i 2024-12-22 23:56:34+00:00| seen|...

CVE-2024-56312

Summary: CVE-2024-56312 is a stored XSS vulnerability in REDCap’s Project Dashboard name field (affected up to version 14.9.6). An authenticated user can inject malicious scripts that execute when the Dashboard name is clicked. The issue stems from insufficient input validation in the name field ...