CVE-2022-1180

CVE-2022-1180 is a reflected XSS in OpenEMR openemr/openemr prior to 6.0.0.4, stemming from lack of input validation in the newname parameter of interface/main/calendar/index.php. Impact: client-side script execution when an authenticated user performs actions in the Calendar module. Affected pro...

CVE-2022-1180 Reflected Cross Site Scripting in openemr/openemr

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1180

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...

CVE-2022-1181

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...

CVE-2022-1181

CVE-2022-1181 – Stored Cross Site Scripting in OpenEMR (

CVE-2022-1181 Stored Cross Site Scripting in openemr/openemr

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2...

CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

CVE-2022-1177 Accounting User Can Download Patient Reports in openemr in openemr/openemr

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

CVE-2022-1177

OpenEMR contains an insecure direct object reference in interface/patient_file/report/custom_report.php (pre-6.1.0). An authenticated user can manipulate the Issue_7 parameter to download arbitrary patient reports, exposing sensitive data. The issue is tracked as CVE-2022-1177 and is documented a...

CVE-2022-1177

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0...

CVE-2022-1178 Stored Cross Site Scripting in openemr/openemr

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1178

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1178

CVE-2022-1178 is a Stored Cross-Site Scripting vulnerability affecting OpenEMR up to 6.0.0.4. The issue arises from insufficient sanitization of user input, enabling an authenticated user to inject scripts via controller.php?practice_settings&document_category&action=add_node&parent_id=… with the...

CVE-2022-1180: Improper Neutralization of Input During Web Page Generation

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1178: Improper Neutralization of Input During Web Page Generation

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

CVE-2022-1179: Improper Neutralization of Input During Web Page Generation

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

OpenEMR 跨站脚本漏洞

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openEMR has a cross-site scripting vulnerability that stems from the lack ...

PT-2022-13694

Name of the Vulnerable Software and Affected Versions openemr versions prior to 6.0.0.4 Description The issue is related to Stored Cross Site Scripting in the GitHub repository openemr/openemr. Recommendations For versions prior to 6.0.0.4, update to version 6.0.0.4 or later to resolve the issue...