PT-2025-13794

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.0.3 Description The issue concerns a reflected cross-site scripting XSS vulnerability. It occurs because the hidden subcategory parameter is output to the page without proper processing in the CAMOS new.php file...