Security Advisory

CVE-2021-32103

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-05-07 03:50:35
Last updated 2024-08-03 23:17:29
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.