PT-2026-139978

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajax save.php. Attackers can store a script payload that executes unencoded when the entry is printed via the...

PT-2021-17344

Name of the Vulnerable Software and Affected Versions: BlackCat CMS version 1.3.6 Description: The issue concerns stored XSS in the admin panel of BlackCat CMS, specifically via the Display Name field. This occurs when an admin interacts with the "backend/preferences/ajax save.php" endpoint...