CVE-2025-67491— OpenEMR has Stored XSS in ub04 helper

OpenEMR has Stored XSS in ub04 helper

OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable `$data` is passed in a click event handler enclosed in single quotes without proper sanitization. Thus, despite `json_encode` a malicious user can still inject a payload such as ` ac' ><img src=x onerror=alert(document.cookie)> ` to trigger the bug. This vulnerability allows low privileged users to embed malicious JS payloads on the server and perform stored XSS attack. This, in turn makes it possible for malicious users to steal the session cookies and perform unauthorized actions impersonating administrators. Version 7.0.4 patches the issue.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

OpenEMR 安全漏洞

OpenEMR是OpenEMR社区的一套开源的医疗管理系统。该系统可用于医疗实践管理、电子医疗记录、处方书写和医疗帐单申请。 OpenEMR 5.0.0.5版本至7.0.3.4版本存在安全漏洞，该漏洞源于计费界面ub04助手存在存储型跨站脚本，变量$data在单引号内的点击事件处理程序中传递且清理不当，可能导致低权限用户嵌入恶意JS有效载荷并执行存储型跨站脚本攻击。

N/A

N/A