CVE-2025-31121 Information

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1 the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1.

Reference

https://github.com/openemr/openemr/security/advisories/GHSA-2w94-qmj6-3qxx