CVE-2026-40507
MediumCVSS 6.1Summary
OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any authenticated user with Forms Administration permissions who visits the link, enabling session hijacking.
Risk Assessment
Reflected XSS can lead to session hijacking of administrative users, potentially resulting in unauthorized access to data or actions.
Recommendation
Update OpenEMR to version 8.3.0 or later to remediate this vulnerability.
Original NVD description (English source)
OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. The templateHtml GET parameter is reflected into the page response without sanitization. An attacker can craft a URL that executes arbitrary JavaScript in the browser of any authenticated user with Forms Administration permissions who visits the link, enabling session hijacking.