CVE-2018-18035

A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-04-02

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Openemr (Open-emr)

References

• https://www.open-emr.org/wiki/index.php/OpenEMR_Patches
• https://www.purplemet.com/blog/openemr-xss-vulnerability