CVE-2026-124463 OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajaxsave.php. Attackers can store a script payload that executes unencoded when the entry is printed via the...

EUVD-2026-119520

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajaxsave.php. Attackers can store a script payload that executes unencoded when the entry is printed via the...

CVE-2026-124463

The OpenEMR software (versions before 8.3.0 ) is vulnerable to a stored cross-site scripting (XSS) flaw via the CAMOS Rx Print View . Authenticated users with CAMOS access can inject malicious HTML by saving content through ajax_save.php. If an attacker stores a script payload, it executes unenco...

CVE-2026-124463: openemr: OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS…

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajaxsave.php. Attackers can store a script payload that executes unencoded when the entry is printed via the...

CVE-2021-27237

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...

CVE-2021-27237: Improper Neutralization of Input During Web Page Generation

The admin panel in BlackCat CMS 1.3.6 allows stored XSS by an admin via the Display Name field to backend/preferences/ajaxsave.php...