CVE-2018-1000020: XSS
Published Feb 9, 2018
·Updated
OpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf and posteddata.php that can result in . This vulnerability appears to have been fixed in 5.0.0 Patch 2 or higher.
Affected Software
1 affected component
open-emr Openemr=5.0.0
Remediation
Patch Available
Event History
Feb 9, 2018
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-1000020?
CVE-2018-1000020 is classified as a moderate severity Cross Site Scripting (XSS) vulnerability in OpenEMR.
2
How do I fix CVE-2018-1000020?
To fix CVE-2018-1000020, you should upgrade to OpenEMR version 5.0.0 Patch 2 or higher.
3
What components are affected by CVE-2018-1000020?
CVE-2018-1000020 affects the open-flash-chart.swf and _posteddata.php components of OpenEMR version 5.0.0.
4
What type of vulnerability is CVE-2018-1000020?
CVE-2018-1000020 is a Cross Site Scripting (XSS) vulnerability.
5
When was CVE-2018-1000020 reported?
CVE-2018-1000020 was reported in 2018 and pertains to OpenEMR version 5.0.0.