Vulnerabilities

TI-2022-01068 CVE-2022-1179 · GHSA-67m3-mf7r-cf34

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr

MEDIUM 64

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.769 Published 2022-03-30 Fixed in 6.0.0.4 CWE-79

TI-2022-01069 CVE-2022-1180 · GHSA-28jx-5cwg-xq36

LOW 18

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00601 Published 2022-03-30 Fixed in 6.0.0.4 CWE-79

TI-2022-01067 CVE-2022-1178 · GHSA-cwjc-3mgx-v6q2

MEDIUM 56

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.51613 Published 2022-03-30 Fixed in 6.0.0.4 CWE-79