CVE-2023-2950

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2945

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2566

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2944

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2942

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2022-4733

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4503

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-25471

An Insecure Direct Object Reference IDOR vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zendmodules/public/Installer/register...

CVE-2022-2494

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...

CVE-2022-24643

A stored cross-site scripting XSS issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0...

PT-2025-22810 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.4 Description: A logging oversight in OpenEMR allows password change events to go unrecorded on the client-side log viewer. This prevents administrators from auditing critical actions, weakening traceability an...

PT-2025-22807 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.4 Description: A stored cross-site scripting XSS vulnerability allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system by entering malicious payloads i...

PT-2025-22811 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.4 Description: A stored cross-site scripting XSS issue allows any authenticated user with patient creation and editing privileges to inject arbitrary JavaScript code into the system. This can be done by enterin...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A cross-site scripting vulnerability exists in versions prior to OpenEMR 7.0.3.4,...

CVE-2025-43860: Improper Neutralization of Input During Web Page Generation

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting XSS vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation and editing privileges to inject arbitrary JavaScript code into...

CVE-2025-32967: Insufficient Logging

OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0.3.4 allows password change events to go unrecorded on the client-side log viewer, preventing administrators from auditing critical actions. This...

CVE-2025-32794: Improper Neutralization of Input During Web Page Generation

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting XSS vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system ...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in OpenEMR versions prior to 7.0.3.4, which stems...

OpenEMR 安全漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing requests. A security vulnerability exists in versions of OpenEMR prior to 7.0.3.4, which...