CVE-2025-30161 | THREATINT

Description

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows anyone who is able to edit a bronchitis form to steal credentials from administrators. This vulnerability is fixed in 7.0.3.

Reserved 2025-03-17 | Published 2025-03-31 | Updated 2025-03-31 | Assigner GitHub_M

HIGH: 8.4CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Product status

< 7.0.3

affected

References

github.com/...penemr/security/advisories/GHSA-59rv-645x-rg6p

github.com/...52e07867e4/interface/forms/bronchitis/view.php

cve.org (CVE-2025-30161)

nvd.nist.gov (CVE-2025-30161)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase