CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31494

CVE-2022-31494 affects LibreHealth EHR Base 2.0.0 where the gacl/admin/acl_admin.php page’s action parameter is vulnerable to cross-site scripting (XSS). The issue is described across multiple sources (Red Hat, CNVD, OSV, CVE listings) as a stored/ reflexive XSS condition in this parameter. The a...

CVE-2022-31494

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php action XSS...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

Cross site scripting

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31498

CVE-2022-31498 affects LibreHealth EHR Base 2.0.0 and is described as a cross-site scripting (XSS) vulnerability in the interface/orders/patient_match_dialog.php path. The connected records confirm the affected product and vulnerability class but do not provide exploitation steps or concrete expl...

CVE-2022-31498

LibreHealth EHR Base 2.0.0 allows interface/orders/patientmatchdialog.php key XSS...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31492

CVE-2022-31492 concerns a Cross Site Scripting (XSS) vulnerability in LibreHealth EHR Base 2.0.0, exploitable via interface/usergroup/usergroup_admin_add.php Username. Affected component is the LibreHealth EHR Base 2.0.0 web interface; root cause is input handling in the Username field that allow...

CVE-2022-31492

Cross Site scripting XSS vulnerability inLibreHealth EHR Base 2.0.0 via interface/usergroup/usergroupadminadd.php Username...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

CVE-2022-31493

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...

Cross site scripting

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php aclid XSS...