REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values.

Published Oct 4, 2019 · Updated Aug 5, 2024 · Assigned by mitre