CVE-2020-11436

Name of the Vulnerable Software and Affected Versions LibreHealth EMR version 2.0.0

Description The issue allows for cross-site scripting (XSS) attacks, which can force arbitrary actions on behalf of other users, including administrators. This means an attacker could potentially perform actions as if they were another user, without that user's knowledge or consent.

Recommendations For LibreHealth EMR version 2.0.0, as a temporary workaround, consider disabling any features that may be susceptible to XSS attacks until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using the application for critical tasks that could be compromised by an XSS attack until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.