Skip to content
Threat Feed
Subscribe

Tag

Health-Records

1 brief RSS
medium advisory

OpenEMR Stored XSS Vulnerability in CCDA Document Preview (CVE-2026-33932)

A stored cross-site scripting (XSS) vulnerability in OpenEMR's CCDA document preview (CVE-2026-33932) allows an attacker to execute arbitrary JavaScript in a clinician's browser session by uploading a malicious CCDA document.

OpenEMR xss cve-2026-33932 health-records
2r 1t