CVE-2021-25921

OpenEMR versions 2.7.3-rc1 to 6.0.0 are affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Allergies section caused by insufficient validation of user input. An attacker could lure an administrator into submitting a malicious payload, enabling the exploit. The CVE entry cites CV...

CVE-2021-25921

In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting XSS due to user input not being validated properly in the Allergies section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit...