| Package | Affected versions | Patched versions |
|---|---|---|
| redcap | = 12.0.11 |
A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 12.0.11. This issue allows any user with project management permissions to inject arbitrary code into the project title (app_title) field when editing an existing project. The payload is then reflected within the title tag of the page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free