| Package | Affected versions | Patched versions |
|---|---|---|
| openmrs module reporting | = 1.12.0 |
The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free