OpenEMR cross-site scripting vulnerability

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.3 contained a cross-site...

EUVD-2026-16038

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored cross-site scripting vulnerability in the CCDA document preview allows an attacker who can upload or send a CCDA document to execute arbitrary JavaScript in ...

CVE-2026-33913 OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated user with access to the Carecoordination module can upload a crafted CCDA document containing to read arbitrary files from the server. Version 8.0.0....

au.gov.nehta:clinical-document-packaging-library (1.2.5), au.gov.nehta:common-library (>=1.1.1, <=1.2.2-metadata) +555 more potentially affected by CVE-2021-40690 via org.apache.santuario:xmlsec (>=2.2.0, <=2.2.2)

org.apache.santuario:xmlsec MAVEN version =2.2.0, =1.1.1, =1.6.1, =1.1.7, =1.3.5, =1.1.0, =2021.8.0, =4.20.0, =5.6.2 - cn.lindianyu:ldy-component 1.0.1 and more Source cves: CVE-2021-40690 Source advisory: GHSA-J8WC-GXX9-82HX...