Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a stored cross-site scripting vulnerability in the GAD-7 anxiety assessment form allows authenticated users with clinician privileges to inject malicious JavaScript that executes when other users view the form. This enables session hijacking, account takeover, and privilege escalation from clinician to administrator. Version 8.0.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 3 | Disclosure2Patch1 |
| 2026-03-02 | 1 | General1 |
CVE-2025-69231 (CVSS:8.7, HIGH) is Analyzed. OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio..https://nvd.nist.gov/vuln/detail/CVE-2025-69231 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post briefly references CVE-2025-69231 with its CVSS score but provides no further details or actionable information.
CVE-2025-69231 OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a stored cross-site scripting vulnera… https://www.cve.org/CVERecord?id=CVE-2025-69231
Post summary
The text references CVE‑2025‑69231, noting it is a stored cross‑site scripting vulnerability in OpenEMR versions before 8.0.0, but provides no PoC, exploit, or patch details.
[CVE-2025-69231: HIGH] Update to OpenEMR version 8.0.0 to fix a stored cross-site scripting vulnerability in the GAD-7 anxiety assessment form, preventing session hijacking and privilege escalation. #cyberse...#cve,CVE-2025-69231,#cybersecurity https://cvefind.com/CVE-2025-69231
Post summary
The post announces that OpenEMR version 8.0.0 includes a patch for a stored XSS vulnerability in the GAD‑7 anxiety assessment form, preventing session hijacking and privilege escalation.
**CVE-2025-69231** pertains to a stored Cross-Site Scripting (XSS) vulnerability present in OpenEMR versions prior to 8.0.0. Specifically, the flaw resides within the GAD-7 anxiety assessment form, a feature used by clinicians to evaluate patient anxiety levels. #Cybersecurity #CVE #HighSeverity #SecurityAlert #PrivilegeEscalation #XSS https://cvetodo.com/cve/CVE-2025-69231
Post summary
The post announces a stored XSS vulnerability in OpenEMR’s GAD‑7 form affecting versions before 8.0.0, providing technical details but no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | - | - | - |