REDCap HTML Injection Vulnerability Allowing Phishing Redirection

A vulnerability allowing HTML injection has been identified in REDCap version 14.9.6. This issue arises in the Survey field name, where an attacker can inject malicious HTML that redirects users to a phishing website. When the survey recipient clicks on the field name, they are taken to the phishing site, potentially leading to unauthorized actions being performed without the user's consent.

Impact

Exploitation of this vulnerability could result in users being redirected to phishing websites, where they may be tricked into providing sensitive information or performing actions that could compromise their security.