CVE-2025-30149 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in…
Medium CVSS: 6.4

CVE-2025-30149

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.
Vendor
Open-emr
Product
Openemr
CWE
CWE-79
Yayın Tarihi
2025-03-31 16:15:25
Güncelleme
2025-04-30 16:08:29
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Openemr MEDIUM Open-emr 2025

Referanslar

https://github.com/openemr/openemr/commit/6cb70595f65decfbdd03e70b49acc414e03744b8 https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7 https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7