CVE-2021-32103

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web…

published May 7, 2021

CVSS
—
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00726 · 53.6th percentile
Published
2021-05-07T03:50Z
EPSS history
Timeline
  • 07 MAY 03:50Z
    A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web…
    cvelistv5