CVE-2017-10962

REDCap before 7.5.1 has XSS via the query string.

• CWE-79

• https://community.projectredcap.org/articles/13/changelog-standard-release.htmlPermissions Required
• https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaaeThird Party Advisory
• https://community.projectredcap.org/articles/13/changelog-standard-release.htmlPermissions Required
• https://gist.github.com/jordanpotti/fef4f1ada404d5ba7f88ab42e93cdaaeThird Party Advisory

Published

Jul 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10956This vulnerability allows remote attackers to disclose sensi…
• CVE-2017-10957This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10958This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-10959This vulnerability allows remote attackers to execute arbitr…
• CVE-2017-1096IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable t…
• CVE-2017-10961REDCap before 7.5.1 has CSRF in the deletion feature of the …
• CVE-2017-10963In Knox SDS IAM (Identity Access Management) and EMM (Enterp…
• CVE-2017-10965An issue was discovered in Irssi before 1.0.4. When receivin…
• CVE-2017-10966An issue was discovered in Irssi before 1.0.4. While updatin…
• CVE-2017-10967In FineCMS before 2017-07-06, application\core\controller\co…
• CVE-2017-10968In FineCMS through 2017-07-07, application\core\controller\t…
• CVE-2017-1097IBM Emptoris Strategic Supply Management Platform 10.0.0.x t…