PT-2022-20763

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the return page parameter of the gacl/admin/acl admin.php file. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the return page parameter in the...

PT-2022-20761

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the acl id parameter of the "gacl/admin/acl admin.php" API endpoint. Recommendations For LibreHealth EHR Base version 2.0.0, avoid using the acl id parameter in the...

PT-2022-20762

Name of the Vulnerable Software and Affected Versions LibreHealth EHR Base version 2.0.0 Description The issue allows for XSS in the gacl/admin/acl admin.php action. Recommendations For LibreHealth EHR Base version 2.0.0, consider disabling access to the gacl/admin/acl admin.php action until a...