CVE-2022-31495

LibreHealth EHR Base 2.0.0 allows gacl/admin/acladmin.php returnpage XSS...

CVE-2022-31495

CVE-2022-31495 affects LibreHealth EHR Base 2.0.0, where the gacl/admin/acl_admin.php return_page parameter is vulnerable to XSS. The root cause is improper handling of user-supplied data in return_page, enabling client-side JavaScript execution. The connected Red Hat, CNVD, OSV, and CVE records ...