Unrated

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary...

CVE-2021-32103 First seen on SecPulse May 7, 2021

Original description The description as published by the source.

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory blog.sonarsource.com
advisory community.open-emr.org
advisory community.sonarsource.com
advisory portswigger.net

Key facts

Severity: Unrated
Published: May 7, 2021
First seen on SecPulse: May 7, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:53