https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 18:20:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05091 bdu:2026-05091 https://cve.radiocsirt.org/vuln/bdu:2026-05091 https://cve.radiocsirt.org/vuln/euvd-2026-277282 EUVD-2026-277282 https://cve.radiocsirt.org/vuln/euvd-2026-277282 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33303 <p>OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to stored cross-site scripting (XSS) via unescaped `portal_login_username` in the portal credential print view. A patient portal user can set their login username to an XSS payload, which then executes in a clinic staff member&#39;s browser when they open the &#34;Create Portal Login&#34; page for that patient. This crosses from the patient session context into the staff/admin session context. Version 8.0.0.2 fixes the issue.</p> <p>OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to stored cross-site scripting (XSS) via unescaped `portal_login_username` in the portal credential print view. A patient portal user can set their login username to an XSS payload, which then executes in a clinic staff member&#39;s browser when they open the &#34;Create Portal Login&#34; page for that patient. This crosses from the patient session context into the staff/admin session context. Version 8.0.0.2 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33303