CVE-2021-25919

CVE-2021-25919 is a Stored Cross-Site Scripting (XSS) vulnerability affecting OpenEMR versions 5.0.2 through 6.0.0, stemming from insufficient user input validation. A highly privileged attacker can inject malicious code into input fields when creating new users. This medium-severity vulnerability has a CVSS score of 4.8, indicating a network attack vector, low complexity, and potential for limited impact on confidentiality and integrity, requiring user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.