CVE-2019-13029 - Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser

Back Back to CVE browser

MEDIUM

Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser

Published Jul 11, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 2.47%

Description

Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://packetstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.html
Third Party AdvisoryVDB Entry
https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2019-13029/REDCap%20Cross%20Site%20Scripting.txt
https://gitlab.com/snippets/1874216
Third Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.html		Third Party AdvisoryVDB Entry
https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2019-13029/REDCap%20Cross%20Site%20Scripting.txt
https://gitlab.com/snippets/1874216		Third Party Advisory