Lucene search

K
cvelistMitreCVELIST:CVE-2021-40374
HistoryApr 06, 2022 - 1:25 a.m.

CVE-2021-40374

2022-04-0601:25:54
mitre
www.cve.org

0.001 Low

EPSS

Percentile

31.2%

A stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient’s details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which could be used in a XSS attack.

0.001 Low

EPSS

Percentile

31.2%

Related for CVELIST:CVE-2021-40374