CVE-2026-126418

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in interface/billing/sleobinvoice.php, which escapes billing codes for HTML attributes but not for JavaScript strings in an inline onkeyup handler. Clinicians with encounter coding access can save crafted billing codes...

CVE-2026-126418

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability in interface/billing/sl_eob_invoice.php. The root cause is that the application fails to escape billing codes for JavaScript strings within an inline onkeyup handler, although it does escape them for...

EUVD-2026-125025

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in interface/billing/sleobinvoice.php, which escapes billing codes for HTML attributes but not for JavaScript strings in an inline onkeyup handler. Clinicians with encounter coding access can save crafted billing codes...