6 matches found
CVE-2020-28938
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...
CVE-2020-28938
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...
CVE-2020-28938
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...
CVE-2020-28938: Improper Neutralization of Input During Web Page Generation
OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users...
OpenClinic Cross-Site Scripting Vulnerability
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A cross-site scripting vulnerability exists in OpenClinic version 0.8.2, which stems from the effects of an XSS vulnerability stored in...
PT-2020-17064
Name of the Vulnerable Software and Affected Versions OpenClinic version 0.8.2 Description The issue is a stored XSS vulnerability in lib/Check.php, allowing users to force actions on behalf of other users. Recommendations For OpenClinic version 0.8.2, consider restricting access to the...