by Kastro
Paper/Archive/CVE-2026-32118

CVE-2026-32118

openemr openemr — OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text

EPSS 0.3%public exploitCVSS 9.0
critical.is priorityof 100
42
CVSS 9.0 (NVD)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 22.6.226 × 204.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-site scripting (XSS) in the Graphical Pain Map ("clickmap") form allows any authenticated clinician to inject arbitrary JavaScript that executes in the browser of every subsequent user who views the affected encounter form. Because session cookies are not marked HttpOnly, this enables full session hijacking of other users, including administrators. This vulnerability is fixed in 8.0.0.1.

Affected

ProductAffectedFixed inSource
openemr< 8.0.0.1–CNA

Scores by source

NVD9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
GitHub_M (CNA)5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refgithub.com/openemr/openemr/security/advisories/GHSA-55qj-x8wh-m4rm