Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2025-30149

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.

  • Published: Mar 31, 2025
  • Updated: May 1, 2025
  • CVE: CVE-2025-30149
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.6
  • AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

No CWE or OWASP classifications available.

Software From Fixed in
open-emr / openemr - 7.0.3