Description
In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OpenMRS | Versions 2.90 and prior | — |
Unscored
CVE-2020-5730
EUVD-2020-26889GHSA-598p-9996-xww3
In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.
Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by tenable