Openemr vulnerabilities
192 CVEs and advisories name Openemr as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30161OpenEMR Stored XSS in OpenEMR Bronchitis Form
- CVE-2025-30149OpenEMR Reflected XSS in AJAX Script
- CVE-2025-29772OpenEMR allows Reflected XSS in CAMOS new.php
- CVE-2025-29789OpenEMR Has Directory Traversal in Load Code feature
- CVE-2024-0875Stored XSS in openemr/openemr
- CVE-2023-2950Improper Authorization in openemr/openemr
- CVE-2023-2949Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2023-2948Cross-site Scripting (XSS) - Generic in openemr/openemr
- CVE-2023-2947Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2023-2946Improper Access Control in openemr/openemr
- CVE-2023-2945Missing Authorization in openemr/openemr
- CVE-2023-2944Improper Access Control in openemr/openemr
- CVE-2023-2943Code Injection in openemr/openemr
- CVE-2023-2942Improper Input Validation in openemr/openemr
- CVE-2023-2674Improper Access Control in openemr/openemr
- CVE-2023-2566Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2022-4733Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2022-4615Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-4567Improper Access Control in openemr/openemr
- CVE-2022-4506Unrestricted Upload of File with Dangerous Type in openemr/openemr
- CVE-2022-4505Authorization Bypass Through User-Controlled Key in openemr/openemr
- CVE-2022-4504Improper Input Validation in openemr/openemr
- CVE-2022-4503Cross-site Scripting (XSS) - Generic in openemr/openemr
- CVE-2022-4502Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-2824Authorization Bypass Through User-Controlled Key in openemr/openemr
- CVE-2022-2734Improper Restriction of Rendered UI Layers or Frames in openemr/openemr
- CVE-2022-2732Missing Authorization in openemr/openemr
- CVE-2022-2733Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-2731Cross-site Scripting (XSS) - Reflected in openemr/openemr
- CVE-2022-2729Cross-site Scripting (XSS) - DOM in openemr/openemr