CVE-2023-22972: XSS
Published Feb 22, 2023
·Updated
A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eyemag/php/eyemagfunctions.php in OpenEMR < 7.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the REQUESTURI.
Affected Software
1 affected component
open-emr Openemr<7.0.0
Remediation
Event History
Feb 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-22972?
CVE-2023-22972 is a Reflected Cross-site scripting (XSS) vulnerability in OpenEMR < 7.0.0.
2
How does CVE-2023-22972 affect OpenEMR?
CVE-2023-22972 allows remote authenticated users to inject arbitrary web script or HTML via the REQUEST_URI.
3
What is the severity of CVE-2023-22972?
The severity of CVE-2023-22972 is medium with a CVSS score of 5.4.
4
How can I fix CVE-2023-22972 in OpenEMR?
To fix CVE-2023-22972 in OpenEMR, it is recommended to apply the 7.0.0 Patch released by OpenEMR.
5
Where can I find more information about CVE-2023-22972?
You can find more information about CVE-2023-22972 and the 7.0.0 Patch on the OpenEMR official website.