open-emr Openemr any version

OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels

Cross-site Scripting (XSS) - DOM in openemr/openemr

Missing Authorization in openemr/openemr

A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUEST_URI.

OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor

OpenEMR has reflected XSS in ajax_download.php via reportID parameter

OpenEMR has Improper ACL On Import/Export Popup

OpenEMR vulnerable to reflected XSS in graphs.php via title parameter

OpenEMR Missing ACL Checks on Insurance Company API Routes

OpenEMR doesn't log password administration properly

An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php.

Cross-site Scripting (XSS) - Stored in openemr/openemr

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.

In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user.

Reflected Cross Site Scripting in openemr/openemr

OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information

OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report page

OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures

OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)

An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component.