CVE-2023-22972: XSS vulnerability in OpenEMR < 7.0.
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | CVE-2023-22972 | 22 Feb 202321:15 | – | nvd |
![]() | Cross site scripting | 22 Feb 202321:15 | – | prion |
![]() | CVE-2023-22972 | 22 Feb 202321:15 | – | osv |
![]() | CVE-2023-22972 | 22 Feb 202300:00 | – | vulnrichment |
![]() | CVE-2023-22972 | 22 Feb 202300:00 | – | cvelist |
Source | Link |
---|---|
open-emr | www.open-emr.org/wiki/index.php/OpenEMR_Patches |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
REQUEST_URI | request body | interface/forms/eye_mag/php/eye_mag_functions.php | Reflected Cross-site scripting (XSS) vulnerability allowing injection of arbitrary web script or HTML. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo