CVE-2022-24643

Description

References

• github.com/openemr · Product
• securityforeveryone.com/blog/openemr-0-day-stored-cross-site-scripting-xss-vulnerability-cve-2022-24643 · Third Party Advisory
• open-emr.org · Vendor Advisory

Weitere Schwachstellen in openemr

• CVE-2026-67611HOCH 8.1OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-facto…
• CVE-2026-39932KRITISCH 9.1OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php…
• CVE-2026-39931HOCH 7.2OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administr…
• CVE-2026-46518HOCH 8.7OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored …
• CVE-2023-54347HOCH 7.5OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repe…