CVE-2021-32103: XSS
Published May 7, 2021
·Updated
A Stored XSS vulnerability in interface/usergroup/usergroupadmin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.
Affected Software
1 affected component
open-emr Openemr<=5.0.2.1
Event History
May 7, 2021
CVE Published
via MITRE·03:50 AM
Data Sourced
via MITRE·03:50 AM
Description
Frequently Asked Questions
1
What is CVE-2021-32103?
CVE-2021-32103 is a Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1.
2
How does CVE-2021-32103 affect OpenEMR?
CVE-2021-32103 allows an admin authenticated user to inject arbitrary web script or HTML via the lname parameter in OpenEMR before version 5.0.2.1.
3
What is the severity of CVE-2021-32103?
CVE-2021-32103 has a severity rating of 4.8, which is considered medium.
4
How can I fix CVE-2021-32103?
To fix CVE-2021-32103, you should update OpenEMR to version 5.0.2.1 or later.
5
What is CWE-79?
CWE-79 is a weakness category that refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').