CVE-2026-40508

Published: Aug 19, 2026Modified: Sep 9, 2026Deferred

5.1

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files containing arbitrary HTML or JavaScript. Attackers can inject malicious scripts through the template upload functionality, which are stored without sanitization and execute in the browser of any other Forms Administration user who views the template in the HTML editor.

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (5)

https://github.com/openemr/openemr/commit/ba316dd1d8de1291102da3f20f64240729ff899e

Source: disclosure@vulncheck.com

https://github.com/openemr/openemr/releases/tag/v8_3_0

Source: disclosure@vulncheck.com

https://github.com/openemr/openemr/security/advisories/GHSA-5293-8q47-cf44

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/openemr-stored-xss-via-patient-portal-template-import-handler

Source: disclosure@vulncheck.com

https://github.com/openemr/openemr/security/advisories/GHSA-5293-8q47-cf44

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.