CVE-2025-23111

An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redirection to a phishing website. An attacker can exploit this to trick the user that receives the survey into clicking on the field name, which redirects them to a phishing website. Thus, this allows malicious actions to be executed without user consent.

• CWE-79
• CWE-79

• https://github.com/ping-oui-no/Vulnerability-Research-CVESS/blob/main/RedCap/CVE_YYYY/README.mdBroken Link

Published

Jan 10, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-23106An issue was discovered in Samsung Mobile Processor Exynos 2…6.5
• CVE-2025-23107An issue was discovered in Samsung Mobile Processor Exynos 1…8.6
• CVE-2025-23108Opening Javascript links in a new tab via long-press in the …4.3
• CVE-2025-23109Long hostnames in URLs could be leveraged to obscure the act…6.5
• CVE-2025-2311Incorrect Use of Privileged APIs, Cleartext Transmission of …9
• CVE-2025-23110An issue was discovered in REDCap 14.9.6. A Reflected cross-…6.1
• CVE-2025-23112An issue was discovered in REDCap 14.9.6. A stored cross-sit…6.1
• CVE-2025-23113An issue was discovered in REDCap 14.9.6. It has an action=m…8.8
• CVE-2025-23114A vulnerability in Veeam Updater component allows Man-in-the…9
• CVE-2025-23115A Use After Free vulnerability on UniFi Protect Cameras coul…9
• CVE-2025-23116An Authentication Bypass vulnerability on UniFi Protect Appl…9.6
• CVE-2025-23117An Insufficient Firmware Update Validation vulnerability cou…6.8