2 matches found
CVE-2025-25925
creationtimestamp| type| source ---|---|--- 2025-03-11 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7222...
4.8CVSS4.8AI score0.00334EPSS
SaveExploits1References1
CVE-2025-25925
Openmrs v2.4.3 Build 0ff0ed is vulnerable to a stored cross-scripting (XSS) vulnerability. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the personName.middleName parameter at the /openmrs/admin/patients/shortPatientForm.form API endpoint. To minimize r...
6.4AI score0.00334EPSS
SaveExploits1References1Affected Software1
20