CVE-2022-4502

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4502 Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting XSS - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2...

CVE-2022-4502

CVE-2022-4502 affects OpenEMR (openemr/openemr) with a reflected XSS vulnerability in versions before 7.0.0.2. Connected sources detail two specific PoCs in the Messages module: (1) messages.php parameter go/stage handling that echoes unsafely printed input, and (2) save.php returning a JSON resp...