https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:03:06 +0000 https://db.gcve.eu/vuln/cve-2026-33303 <p><strong>Affected:</strong> openemr</p> <p>OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to stored cross-site scripting (XSS) via unescaped `portal_login_username` in the portal credential print view. A patient portal user can set their login username to an XSS payload, which then executes in a clinic staff member&#39;s browser when they open the &#34;Create Portal Login&#34; page for that patient. This crosses from the patient session context into the staff/admin session context. Version 8.0.0.2 fixes the issue.</p> <p><strong>Affected:</strong> openemr</p> <p>OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to stored cross-site scripting (XSS) via unescaped `portal_login_username` in the portal credential print view. A patient portal user can set their login username to an XSS payload, which then executes in a clinic staff member&#39;s browser when they open the &#34;Create Portal Login&#34; page for that patient. This crosses from the patient session context into the staff/admin session context. Version 8.0.0.2 fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-33303