| Package | Affected versions | Patched versions |
|---|---|---|
| redcap | < 9.3.0 | 9.3.0 |
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free