CVE-2025-30149 — OpenEMR Reflected XSS in AJAX Script
OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script i…
Published: 2025-03-31 · CVSS: 6.4 · CVSS 3.1
OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7