PT-2022-19924

Name of the Vulnerable Software and Affected Versions LibreHealth EHR version 2.0.0 Description The issue is related to a lack of sanitization of the GET parameters formseq and formid in the "interface/orders/find order popup.php" endpoint, leading to multiple cross-site scripting XSS...