CVE-2024-26476

Versions of open-emr prior to v.7.0.2 are vulnerable to a privilege escalation flaw. A remote attacker can exploit this issue by submitting a crafted script targeting the formid parameter within the ereq_form.php component. To remediate this, users should update to version 7.0.2 or later . Tempor...