Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-30149

OpenEMR Reflected XSS in AJAX Script

Description

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

openemr openemr

  • < 7.0.3affected

References