CVE-2026-103935 | OpenEMR up to 8.2.x Forms new.php text transfer_to/code/codetext cross site scripting

November 5, 2026 Yanac

A vulnerability was found in OpenEMR up to 8.2.x. It has been classified as problematic. This affects the function text of the file interface/forms/transfer_summary/new.php of the component Forms. This manipulation of the argument transfer_to/code/codetext causes cross site scripting.

This vulnerability appears as CVE-2026-103935. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More