CVE-2025-65270

6.1 mediumEPSS 0.3%

Medium (6.1) in clincapture captivate electronic data capture. EPSS 0.3% chance of exploitation in the next 30 days.

Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-12-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

clincapture:captivate_electronic_data_capture

References

https://github.com/xh4vm/CVE-2025-65270
https://www.clincapture.com/
https://github.com/xh4vm/CVE-2025-65270

Check your stack JSON