medium4.3
CVE-2013-4608
Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphi…
Impact
Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Project-Redcap | Redcap | Versions 4.13.18, 4.14.5, 4.14.6, 4.15.0, 4.15.1, 4.15.2 |
| Vanderbilt | Redcap | through 5.0.5 Versions 4.14.0, 4.14.1, 4.14.2, 4.14.3, 4.14.4 |