CVE-2020-11436
LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.
Date published : 2020-07-15
https://know.bishopfox.com/advisories
https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0