CVE-2022-31497

LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...

CVE-2022-31497

CVE-2022-31497 affects LibreHealth EHR Base 2.0.0. The vulnerability is a patient-facing XSS in the web interface’s interface/main/finder/finder_navigation.php due to inadequate input filtering/escaping. The Red Hat/EUVD/CNVD and OSV entries in the connected set corroborate the same flaw descript...

CVE-2022-31497: Improper Neutralization of Input During Web Page Generation

LibreHealth EHR Base 2.0.0 allows interface/main/finder/findernavigation.php patient XSS...

CVE-2018-10571

Multiple reflected cross-site scripting XSS vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 patient parameter to interface/main/finder/findernavigation.php; 2 key parameter to interface/billing/getclaimfile.php; 3 formid or 4 formseq...

CVE-2018-10571: Improper Neutralization of Input During Web Page Generation

Multiple reflected cross-site scripting XSS vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 patient parameter to interface/main/finder/findernavigation.php; 2 key parameter to interface/billing/getclaimfile.php; 3 formid or 4 formseq...