CVE-2021-25918

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user...

PT-2021-16848

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.2 through 6.0.0 Description The issue is related to Stored Cross-Site-Scripting XSS due to improper validation of user input, which is then rendered in the TOTP Authentication method page. A highly privileged attacker coul...

CVE-2021-25918: Improper Neutralization of Input During Web Page Generation

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user...