Multiple Reflected & Stored Cross-Site Scripting (XSS) Vulnerabilities in OpenEMR 5.0.0 and Prior Versions

CVE-2017-1000240 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML.

Learn more about our Web App Pen Testing.