CVE-2025-30149

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3.

• CWE-79

• https://github.com/openemr/openemr/commit/6cb70595f65decfbdd03e70b49acc414e03744b8Patch
• https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7Exploit, Vendor Advisory
• https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7Exploit, Vendor Advisory

Published

Mar 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30142An issue was discovered on G-Net Dashcam BB GONX devices. By…8.1
• CVE-2025-30143Rule 3000216 (before version 2) in Akamai App & API Protecto…5.4
• CVE-2025-30144fast-jwt provides fast JSON Web Token (JWT) implementation. …6.5
• CVE-2025-30145GeoServer is an open source server that allows users to shar…7.5
• CVE-2025-30147Besu Native contains scripts and tooling that is used to bui…8.7
• CVE-2025-30148Silverstripe Framework is a PHP framework which powers the S…5.4
• CVE-2025-3015A vulnerability classified as critical has been found in Ope…8.8
• CVE-2025-30150Shopware 6 is an open commerce platform based on Symfony Fra…5.3
• CVE-2025-30151Shopware is an open commerce platform. It's possible to pass…7.5
• CVE-2025-30152The Syliud PayPal Plugin is the Sylius Core Team’s plugin fo…6.5
• CVE-2025-30153kin-openapi is a Go project for handling OpenAPI files. Prio…7.5
• CVE-2025-30154reviewdog/action-setup is a GitHub action that installs revi…8.6