TI-2025-40309 CVE-2025-65270 · GHSA-jj84-f8gw-6c9jReflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3…Priority MEDIUM 60Reflected cross-site scripting (XSS) vulnerability in ClinCapture EDC 3.0 and 2.2.3, allowing an unauthenticated remote attacker to execute JavaScript code in the context of the victim's browser.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00295 · Published 2025-12-22 · No fix listed CWE-79