Threats tagged 'ghsa-g2f8-3f57-c24g'

OpenEMR versions prior to 8.3.0 contain a stored cross-site scripting (XSS) vulnerability that allows authenticated users with CAMOS access to inject malicious HTML content. This malicious content is saved via ajax_save.php and executes unencoded when printed through rx_print.php, enabling attackers to perform actions and read data as the victim user.