cve/2024/CVE-2024-56376.md
2025-09-29 21:09:30 +02:00

962 B

CVE-2024-56376

Description

A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field. When a user click on the received message, the crafted payload is executed, potentially enabling the execution of arbitrary web scripts.

POC

Reference

Github

No PoCs found on GitHub currently.