Advisory Details

CVE-2025-23112

An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious scripts into the Survey field name of Survey. When a user receive the survey, if he clicks on the field name, it triggers the XSS payload.

References (Advisories, Solutions, and Tools):

Note: This product uses data from the NVD API but is not endorsed or certified by the NVD.