CVE-2026-124463: OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View

Published Nov 8, 2026

Updated

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajaxsave.php. Attackers can store a script payload that executes unencoded when the entry is printed via the non-printhtml branch of rxprint.php, performing actions and reading data as the victim user.

Event History

Nov 8, 2026

CVE Published

via MITRE·01:15 PM

Data Sourced

via MITRE·01:15 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated user with CAMOS access can exploit it by saving malicious CAMOS content through ajax_save.php. Exploitation also requires a victim to print the stored entry through the non-print_html branch of rx_print.php.

What can happen when the stored payload executes?

The payload executes in the victim user's context, allowing the attacker to perform actions and read data as that user. The impact can therefore depend on the privileges of the user who prints the affected entry.

Which versions need remediation?

OpenEMR versions before 8.3.0 are affected. Updating to 8.3.0 or later addresses the affected version range described here.

CVE-2026-124463: OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View

Event History

Frequently Asked Questions

Who can exploit this issue?

What can happen when the stored payload executes?

Which versions need remediation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What can happen when the stored payload executes?

Which versions need remediation?