4 matches found
CVE-2022-1180
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
4.6CVSS6.5AI score0.00592EPSS
SaveExploits2References1
CVE-2022-1180 Reflected Cross Site Scripting in openemr/openemr
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
4.6CVSS4.7AI score0.00592EPSS
SaveExploits2References2
CVE-2022-1180
CVE-2022-1180 is a reflected XSS in OpenEMR openemr/openemr prior to 6.0.0.4, stemming from lack of input validation in the newname parameter of interface/main/calendar/index.php. Impact: client-side script execution when an authenticated user performs actions in the Calendar module. Affected pro...
4.6CVSS3.8AI score0.00592EPSS
SaveExploits2References2Affected Software1
20