CVE-2017-7990

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

PT-2017-18052

Name of the Vulnerable Software and Affected Versions OpenMRS Reporting Module version 1.12.0 Description The issue allows for CSRF attacks with resultant XSS, where administrative authentication can be hijacked to insert JavaScript into a name field in the "webapp/reports/manageReports.jsp"...