← Database

CVE-2022-29940

MEDIUM CVSS: 5.4 Published: 2022-05-05 Modified: 2026-06-17

Description

In LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in interface\orders\find_order_popup.php leads to multiple cross-site scripting (XSS) vulnerabilities.

Affected Platforms

Librehealth Librehealth Ehr

Weakness Type

CWE-79

References