CVE-2020-28938

creationtimestamp| type| source ---|---|--- 2020-12-03 18:25:23+00:00| seen| https://t.me/cibsecurity/17096...

CVE-2020-28938

OpenClinic 0.8.2 is affected by a stored XSS in lib/Check.php (CVE-2020-28938). The issue can let an attacker force actions on behalf of other users via a crafted payload embedded in a patient record. ThreatPost notes the payload could be triggered when an admin user clicks a link, potentially es...