CVE-2017-1000240: XSS
The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and prior versions. These vulnerabilities could allow remote authenticated attackers to inject arbitrary web script or HTML.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000240?
CVE-2017-1000240 is considered a high severity vulnerability due to its potential for remote authenticated attackers to execute arbitrary web scripts.
How do I fix CVE-2017-1000240?
To fix CVE-2017-1000240, upgrade OpenEMR to a version later than 5.0.0 where the vulnerabilities are addressed.
What types of vulnerabilities are present in CVE-2017-1000240?
CVE-2017-1000240 contains multiple reflected and stored Cross-Site Scripting (XSS) vulnerabilities.
Who is affected by CVE-2017-1000240?
Users of OpenEMR version 5.0.0 and prior are affected by CVE-2017-1000240.
Can CVE-2017-1000240 be exploited without authentication?
No, CVE-2017-1000240 requires that the attacker be a remote authenticated user to exploit the vulnerabilities.