Description (CNA)
A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the Notes field of a calendar event. When the event is viewed, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.evms.edu/research/resources_services/redcap/redcap_change_log/
- https://github.com/ping-oui-no/Vulnerability-Research-CVESS/tree/main/RedCap
ADP enrichment
No English description supplied.
No references supplied.