CVE-2025-32794

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.3 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

O

penEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the First and Last Name fields during patient registration. This code is later executed when viewing the patient's encounter under Orders → Procedure Orders. Version 7.0.3.4 contains a patch for the issue.

References

Link	Resource
https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx	Exploit Vendor Advisory
https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*

History

02 Jul 2025, 00:45

Type	Values Removed	Values Added
First Time		Open-emr Open-emr openemr
CPE		cpe:2.3:a:open-emr:openemr::::::::
References	~~() https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx -~~	() https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx - Exploit, Vendor Advisory

23 May 2025, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-23 16:15

Updated : 2025-07-02 00:45

NVD link : CVE-2025-32794

Mitre link : CVE-2025-32794

CVE.ORG link : CVE-2025-32794

JSON object : View

Products Affected

openemr

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-32794", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 2.3}]}, "published": "2025-05-23T16:15:25.300", "references": [{"url": "https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx", "tags": ["Exploit", "Vendor Advisory"], "source": "[email protected]"}, {"url": "https://github.com/openemr/openemr/security/advisories/GHSA-3c27-2m7h-f7rx", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerability in versions prior to 7.0.3.4 allows any authenticated user with patient creation privileges to inject arbitrary JavaScript code into the system by entering malicious payloads in the First and Last Name fields during patient registration. This code is later executed when viewing the patient's encounter under Orders \u2192 Procedure Orders. Version 7.0.3.4 contains a patch for the issue."}, {"lang": "es", "value": "OpenEMR es una aplicaci\u00f3n gratuita y de c\u00f3digo abierto para la gesti\u00f3n de historiales m\u00e9dicos electr\u00f3nicos y consultas m\u00e9dicas. Una vulnerabilidad de cross-site scripting (XSS) almacenado en versiones anteriores a la 7.0.3.4 permite a cualquier usuario autenticado con privilegios para crear pacientes inyectar c\u00f3digo JavaScript arbitrario en el sistema mediante la introducci\u00f3n de payloads maliciosos en los campos de Nombre y Apellido durante el registro del paciente. Este c\u00f3digo se ejecuta posteriormente al visualizar la consulta del paciente en \u00d3rdenes ? \u00d3rdenes de procedimiento. La versi\u00f3n 7.0.3.4 incluye un parche para este problema."}], "lastModified": "2025-07-02T00:45:22.007", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D87CF1-6A62-4803-B70B-0286F6398043", "versionEndExcluding": "7.0.3.4"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}