QwikSec

Security Database

CVE

CWE

Training

CVE-2025-31121

Published: Apr 1, 2025

Modified: Apr 1, 2025

PUBLISHED

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1.

Vendor	Product	Versions
openemr	openemr	affected `< 7.0.3.1`

Weaknesses (CWE)

References

https://github.com/openemr/openemr/security/advisories/GHSA-2w94-qmj6-3qxx

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.