← Back to browse
·
API
CVE-2023-2948
Severity
HIGH
CVSS
8.3
EPSS
0.96731
Risk score
67.06
CISA KEV
No
PoC
No
Published
2023-05-28
Modified
2025-01-14
First seen
2026-08-07
Aliases
EUVD-2023-34394, GHSA-9942-RG4X-MCPV
Products
OpenEMR:openemr/openemr unspecified <7.0.1
Sources
euvd
EUVD-2023-34394
Description
Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-34394
https://github.com/openemr/openemr/commit/af1ecf78d1342519791bda9d3079e88f7d859015
https://huntr.dev/bounties/2393e4d9-9e9f-455f-bf50-f20f77b0a64d