CVE-2020-5730

In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.

Date published : 2020-04-17

https://www.tenable.com/security/research/tra-2020-18