CVEs-PoC/2020/CVE-2020-11436.md

CVE-2020-11436

Description

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.

POC

Reference

• https://know.bishopfox.com/advisories
• https://labs.bishopfox.com/advisories/librehealth-version-2.0.0-0

Github

No PoCs found on GitHub currently.