Description
OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any authenticated user with Forms Administration permissions who visits the link, enabling session hijacking.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
openemr openemr
Default version status: affected
0 to < 8.3.0affected
pkg:github/openemr/openemrReferences
- https://github.com/openemr/openemr/security/advisories/GHSA-rmmr-8498-463g ↗
- https://github.com/openemr/openemr/releases/tag/v8_3_0 ↗
- https://github.com/openemr/openemr/commit/ba316dd1d8de1291102da3f20f64240729ff899e ↗
- https://www.vulncheck.com/advisories/openemr-reflected-xss-via-templatehtml-parameter-in-patient-portal ↗