PT-2019-15139

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description A reflected XSS issue exists in the interface/forms/eye mag/view.php file, specifically affecting the id parameter. Recommendations For versions prior to 5.0.2.1, update to version 5.0.2.1 or later...

PT-2019-14837

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description The issue allows a remote attacker to execute arbitrary code in the context of a user's session. This is achieved via the pid parameter in the interface/forms/eye mag/view.php file. Recommendations...