CVE-2025-25925

creationtimestamp| type| source ---|---|--- 2025-03-11 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7222...

CVE-2025-25925

CVE-2025-25925 refers to a stored cross-site scripting (XSS) vulnerability in OpenMRS v2.4.3 Build 0ff0ed. The issue allows attackers to inject arbitrary web scripts or HTML via the personName.middleName field on the page /openmrs/admin/patients/shortPatientForm.form, enabling script execution in...