CVE-2021-25922: XSS
Published Mar 22, 2021
·Updated
In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly. An attacker could trick a user to click on a malicious url and execute malicious code.
Affected Software
1 affected component
open-emr Openemr>=4.2.0<=6.0.0
Remediation
Event History
Mar 22, 2021
CVE Published
via MITRE·07:39 PM
Data Sourced
via MITRE·07:39 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-25922?
CVE-2021-25922 is considered a medium severity vulnerability due to its potential for exploitation via reflected cross-site scripting.
2
How do I fix CVE-2021-25922?
To fix CVE-2021-25922, upgrade OpenEMR to version 6.0.1 or later where the vulnerability has been patched.
3
What are the affected versions of OpenEMR for CVE-2021-25922?
CVE-2021-25922 affects OpenEMR versions from 4.2.0 to 6.0.0.
4
What type of attack is associated with CVE-2021-25922?
CVE-2021-25922 is associated with reflected cross-site scripting (XSS) attacks.
5
Can CVE-2021-25922 allow attackers to execute code?
Yes, CVE-2021-25922 can allow attackers to execute malicious code by tricking users into clicking on a malicious URL.