CVE-2019-13029
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.5%
from disclosure to weapon8 days
Published on NVDJul 11
1st PoC+8d
exploitation probability
2.5%top 17% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary malicious HTML or JavaScript code into a user's web browser.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencepacketstormsecurity.com/files/153691/REDCap-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47146unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.