PT-2022-16406

Name of the Vulnerable Software and Affected Versions REDCap version 12.0.11 Description A Stored Cross-Site Scripting issue was discovered in the messenger ajax.php file. This issue allows any authenticated user to inject arbitrary code into the new title field when editing an existing...

CVE-2020-15537

An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box...