CVE-2025-25925

creationtimestamp| type| source ---|---|--- 2025-03-11 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7222...

CVE-2025-25925

Openmrs v2.4.3 Build 0ff0ed is vulnerable to a stored cross-scripting (XSS) vulnerability. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the personName.middleName parameter at the /openmrs/admin/patients/shortPatientForm.form API endpoint. To minimize r...