OpenEMR Reflected Cross-Site Scripting Vulnerability in Graphs Ajax Endpoint

A reflected cross-site scripting vulnerability has been identified in OpenEMR versions through 8.0.0.2. The issue arises in the 'library/ajax/graphs.php' file, where the POST parameter 'title' is echoed back in a JSON response without proper sanitization. This response is incorrectly served with a 'text/html' Content-Type, causing the browser to execute any injected HTML or script tags as active content, rather than interpreting the output as JSON. An authenticated attacker could exploit this flaw to execute arbitrary JavaScript in the context of the victim's session.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious scripts in the context of the user's session.

Remediation

Users can upgrade to OpenEMR version 8.0.0.3 or later to address this vulnerability.