Description (CNA)
A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.open-emr.org/wiki/index.php/OpenEMR_Patches
- https://www.purplemet.com/blog/openemr-xss-vulnerability
ADP enrichment
No English description supplied.