Threats tagged 'ghsa-rwwf-mjrp-f4xx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.6	CVE-2026-124448OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the CCDA/CCD preview stylesheets, where High8.62026-11-08GCVE DatabaseCVE-2026-124448 OpenEMR versions prior to 8.3.0 have a stored cross-site scripting (XSS) vulnerability in the CCDA/CCD preview stylesheets. This flaw allows authenticated users to upload crafted CCDA/CCD documents containing malicious event-handler attributes that execute script in a clinician's session during document preview. Report on CVE-2026-124448 Vulnerability CWE-79 #ghsa-rwwf-mjrp-f4xx	GCVE Database	2026-11-08

Page 1 of 1