CVE-2025-29772 in OpenEMRinformation

Résumé

par MITRE • 31/03/2025

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting (XSS) vul;nerability in CAMOS new.php. This vulnerability is fixed in 7.0.3.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Responsable

GitHub M

Réserver

11/03/2025

Divulgation

31/03/2025

Modérer

accepté

Entrée

VDB-302199

CPE

prêt

EPSS

0.00246

KEV

non

Activités

très faible

Sources

Interested in the pricing of exploits?

See the underground prices here!