CVE-2026-124468

OpenEMR versions before 8.3.0 are vulnerable to an SQL injection vulnerability within the Standard REST API's patient insurance and employer search functions. The root cause is the improper concatenation of query-string parameter names into SQL statements as column identifiers without sufficient ...