Unrated severityOSV Advisory· Published Jan 21, 2026· Updated Mar 5, 2026
OpenEMR 5.0.2.1 - Remote Code Execution
CVE-2021-47817
Description
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript through user profile parameters. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command execution on the vulnerable OpenEMR instance.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.exploit-db.com/exploits/49784mitreexploit
- blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerabilitymitrevendor-advisory
- www.vulncheck.com/advisories/openemr-remote-code-executionmitrethird-party-advisory
- sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/downloadmitreproduct
- www.open-emr.orgmitreproduct
- www.youtube.com/watchmitretechnical-description
News mentions
0No linked articles in our index yet.