Threats tagged 'ghsa-pv8c-r52v-h57w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-126493OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows low-privileged patient portal Medium4.82026-11-13GCVE DatabaseCVE-2026-126493 OpenEMR versions before 8.5.0 have a stored cross-site scripting (XSS) vulnerability in the onsiteportalactivity API. This flaw allows low-privileged patient portal users to inject JavaScript code via the tableArgs field. The injected script executes when providers click the delete button on the audit review page due to improper handling of an unquoted data-delete-id attribute. Report on CVE-2026-126493 Vulnerability CWE-79 #ghsa-pv8c-r52v-h57w	GCVE Database	2026-11-13

Page 1 of 1