BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2026-103935OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/forms/transfer_summary/new.php and interface/forms/functional_cognitive_status/new.php render stored transfer_to, code, and codetext values with text(), which uses ENT_NOQUOTES, inside double-quoted HTML value attributes. An authenticated clinical user can store a value containing a double quote that escapes the attribute and injects event-handler markup when another clinician opens the form. Successful exploitation can expose session data and protected health information or permit patient-record actions in the victim's session. This issue is fixed in version 8.3.0.

8.1 HIGHEPSS 0.34%Not in KEVNVD: Awaiting Analysis

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
8.1HIGH3.1GitHub_M (CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Details

CVE ID
CVE-2026-103935
Status
Awaiting Analysis
Assigner (CNA)
GitHub_M
Published
Nov 5, 2026
Last modified
2026-11-06 21:29 UTC
Weaknesses
  • CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 07:50 UTC.