CVE-2026-124463

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0

Description Authenticated users with CAMOS access can perform a stored cross-site scripting attack by injecting HTML into CAMOS content via the 'ajax save.php' endpoint. The injected script payload executes unencoded when the entry is processed through the non-print html branch of the 'rx print.php' endpoint, allowing the attacker to perform actions and access data using the victim's session.

Recommendations Update to version 8.3.0 or later. Restrict access to the 'ajax save.php' endpoint for users who do not require CAMOS functionality.