Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

Cross site scripting

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

Authorization

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2732 Missing Authorization in openemr/openemr

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2732 Missing Authorization in openemr/openemr

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2732

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2732

CVE-2022-2732 affects OpenEMR repository openemr/openemr prior to 7.0.0.1 due to Missing Authorization and improper privilege checks. The issue enables unauthorized users to create and edit amendments via interface/patient_file/summary/add_edit_amendments.php, compromising integrity and privacy a...

CVE-2022-2732 Missing Authorization in openemr/openemr

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2733

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2733 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2733

CVE-2022-2733 describes a reflected Cross-site Scripting (XSS) vulnerability in OpenEMR prior to version 7.0.0.1. The issue arises when user-controlled input is reflected in the response, with sources consistently identifying the vulnerable parameter as the pricelevel field in the OpenEMR web int...

CVE-2022-2731

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2731

CVE-2022-2731 is a reflected XSS vulnerability in OpenEMR prior to version 7.0.0.1. Several connected sources confirm the issue affects OpenEMR/OpenEMR installations, with the vulnerability stemming from the backup page’s form_status parameter on interface/main/backup.php. The attack involves inj...

CVE-2022-2731 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2731 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2729 Cross-site Scripting (XSS) - DOM in openemr/openemr

Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2729 Cross-site Scripting (XSS) - DOM in openemr/openemr

Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2729

Cross-site Scripting XSS - DOM in GitHub repository openemr/openemr prior to 7.0.0.1...

CVE-2022-2729

OpenEMR contains a DOM-based XSS vulnerability (CVE-2022-2729) affecting versions prior to 7.0.0.1, reported as DOM XSS in the add-manually-input field on the whitelist file page. The issue arises from client-side DOM manipulation that can render untrusted data as executable code in the browser. ...