Description
In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OpenMRS | Versions 2.90 and prior | — |
Unscored
CVE-2020-5731
EUVD-2020-26890GHSA-j5p6-2277-5xjv
In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.
Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by tenable