medium5.4
CVE-2019-15127
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.
Impact
REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanderbilt | Redcap | before 9.3.0 |