CVE-2025-67491
OpenEMR is a free and open source electronic health records and medical practice management application.
Published Feb 25, 2026 · updated Jun 17, 2026 · open-emr openemr
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable is passed in a click event handler enclosed in single quotes without proper sanitization. Thus, despite a malicious user can still inject a payload such as to trigger the bug. This vulnerability allows low privileged users to embed malicious JS payloads on the server and perform stored XSS attack. This, in turn makes it possible for malicious users to steal the session cookies and perform unauthorized actions impersonating administrators. Version 7.0.4 patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Feb 25, 2026 · NIST NVD
Detected
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable is passed in a click event handler enclosed in single quotes without proper sanitization. Thus, despite a malicious user can still inject a payload such as
Jun 17, 2026 · NIST NVD
Updated
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable is passed in a click event handler enclosed in single quotes without proper sanitization. Thus, despite a malicious user can still inject a payload such as
Affected
- cpe open-emr/openemrversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-67491
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2025-67491
OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The variable is passed in a click event
nvd.nist.gov