CVE-2013-4608

REDCap <5.0.6 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.

References (1)

[Various Sources] http://ctsi.psu.edu/wp-content/uploads/2013/03/REDCap-Release-Notes-Version5.pdf

Scores

EPSS 0.0022

EPSS Percentile 45.0%

Details

CWE

CWE-79

Status published

Products (20)

project-redcap/redcap

... and 10 more

Published Jun 17, 2013

Tracked Since Feb 18, 2026