OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28406)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the foreignid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of ...

PT-2019-16815

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.1 and earlier Description The issue concerns a reflected XSS vulnerability. This vulnerability is located in the controller.php file and is related to the foreign id parameter. It could allow an attacker to execute arbitra...