CVE-2025-31121
OpenEMR allows XSS in Patient Image feature
Résumé
OpenEMR allows XSS in Patient Image feature
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov