CVE-2013-4620: XSS
Published Aug 9, 2013
·Updated
Cross-site scripting (XSS) vulnerability in interface/main/onotes/officecommentsfull.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.
Affected Software
1 affected component
open-emr Openemr=4.1.1
Remediation
Event History
Aug 9, 2013
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4620?
CVE-2013-4620 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2013-4620?
To fix CVE-2013-4620, update OpenEMR to a version after 4.1.1 where the vulnerability has been addressed.
3
What does CVE-2013-4620 affect?
CVE-2013-4620 affects the OpenEMR version 4.1.1, specifically the office_comments_full.php file.
4
What type of attack can exploit CVE-2013-4620?
CVE-2013-4620 can be exploited through cross-site scripting (XSS) attacks allowing arbitrary web script injection.
5
Who is at risk from CVE-2013-4620?
Users and administrators of OpenEMR version 4.1.1 are at risk of CVE-2013-4620 unless they apply the necessary updates.