Description
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities.
Unscored
CVE-2022-29940
EUVD-2022-34249GHSA-6f66-hpxr-v3j7
In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to m…
Published May 5, 2022 · Updated Aug 3, 2024 · Assigned by mitre