CVE-2025-29772 — OpenEMR allows Reflected XSS in CAMOS new.php
OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without bein…
Published: 2025-03-31 · CVSS: 7.2 · CVSS 4.0
OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting (XSS) vul;nerability in CAMOS new.php. This vulnerability is fixed in 7.0.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7