CVE-2025-25925

creationtimestamp| type| source ---|---|--- 2025-03-11 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7222...

CVE-2025-25925

A stored cross-site scripting (XSS) vulnerability exists in Openmrs v2.4.3 Build 0ff0ed . An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the personName.middleName parameter via the /openmrs/admin/patients/shortPatientForm.form API endpoint. This vulnerab...