CVE-2026-124463 OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View
CriticalCVSS 9.3
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated users with CAMOS access to inject HTML by saving malicious CAMOS content through ajax_save.php. Attackers can store a script payload that executes unencoded when the entry is printed via the non-print_html branch of rx_print.php, performing actions and reading data as the victim user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openemr | < 8.3.0 | 8.3.0 |
References
- GitHub Security Advisory (GHSA-rc6m-6pq4-r69x) vendor-advisory
- VulnCheck Advisory: OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View third-party-advisory