2 matches found
EUVD-2026-52349
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags...
4.8CVSS5.4AI score0.00251EPSS
SaveExploits0References2
CVE-2026-67612: Improper Neutralization of Input During Web Page Generation
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags...
4.8CVSS5.8AI score0.00251EPSS
SaveExploits0References2
20