Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-40374
HistoryApr 06, 2022 - 2:15 a.m.

Cross site scripting

2022-04-0602:15:00
PRIOn knowledge base
www.prio-n.com
2

0.001 Low

EPSS

Percentile

31.2%

A stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3.5.1. Updating a patient’s details allows remote attackers to inject arbitrary web script or HTML via the Address1 parameter. This JavaScript then executes when the patient profile is loaded, which could be used in a XSS attack.

CPENameOperatorVersion
openeyeeq3.5.1

0.001 Low

EPSS

Percentile

31.2%

Related for PRION:CVE-2021-40374