CVE-2025-29772
OpenEMR allows Reflected XSS in CAMOS new.php
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
OpenEMR allows Reflected XSS in CAMOS new.php
OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting (XSS) vul;nerability in CAMOS new.php. This vulnerability is fixed in 7.0.3.
Reserved 2025-03-11 | Published 2025-03-31 | Updated 2025-03-31 | Assigner GitHub_MCWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
github.com/...penemr/security/advisories/GHSA-89gp-g4c9-hv8h
github.com/...ommit/17c5c424695de50db94f2c01fb9abfc441d09a1a
Support options
