EUVD-2026-125132

OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users to store malicious SQL via library/ajax/addlistitem.php. Attackers can persist a SQL fragment in the recentpatientcolumns optionid value, which dynamicfinder.php concatenates in...