XSS Vulnerability in REDCap Data Import Tool

XSS Vulnerability in REDCap Data Import Tool

CVE-2019-15127 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.

Learn more about our Web Application Penetration Testing UK.