Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-30149

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.

  • Published: Mar 31, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-30149
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.4
  • AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
open-emr / openemr - 7.0.3