CVE-2025-25925

creationtimestamp| type| source ---|---|--- 2025-03-11 20:21:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7222...

CVE-2025-25925

A stored cross-scripting XSS vulnerability in Openmrs v2.4.3 Build 0ff0ed allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the personName.middleName parameter at /openmrs/admin/patients/shortPatientForm.form...