CVE-2018-18035

A vulnerability in flashcanvas.swf in OpenEMR before 5.0.1 Patch 6 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.

Date published : 2019-04-02

https://www.open-emr.org/wiki/index.php/OpenEMR_Patches

https://www.purplemet.com/blog/openemr-xss-vulnerability