CVE-2018-1000020

OpenEMR 5.0.0 contains a Cross-Site Scripting (XSS) vulnerability in open-flash-chart.swf and _posteddata.php. The issue is addressed in OpenEMR 5.0.0 Patch 2 or higher. No exploitation details are provided beyond the fixed version information; confirm patched builds for production deployments an...