← All advisories

Medium severity5.4NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026

CVE-2019-15127

CVE-2019-15127

Description

REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Vanderbilt/Redcap
cpe:2.3:a:vanderbilt:redcap:*:*:*:*:*:*:*:*
Range: <9.3.0
REDCap/REDCapdescription
REDCap/REDCapllm-fuzzy
Range: <9.3.0

Patches

Vulnerability mechanics

References

1

www.evms.edu/research/resources_services/redcap/redcap_change_log/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.