← Database

CVE-2022-29939

MEDIUM CVSS: 5.4 Published: 2022-05-05 Modified: 2026-06-17

Description

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface\billing\sl_eob_process.php leads to multiple cross-site scripting (XSS) vulnerabilities.

Affected Platforms

Librehealth Librehealth Ehr

Weakness Type

CWE-79

References