Medium severity5.4OSV Advisory· Published Jan 21, 2026· Updated May 26, 2026
CVE-2021-47817
CVE-2021-47817
Description
OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a malicious payload to download and execute a web shell, enabling remote command execution on the vulnerable OpenEMR instance.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
6- blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerabilitynvdExploitPatchThird Party Advisory
- www.exploit-db.com/exploits/49784nvdExploitThird Party AdvisoryVDB Entry
- www.youtube.com/watchnvdExploit
- www.vulncheck.com/advisories/openemr-remote-code-executionnvdThird Party Advisory
- sourceforge.net/projects/openemr/files/OpenEMR%20Current/5.0.2.1/openemr-5.0.2.tar.gz/downloadnvdProduct
- www.open-emr.orgnvdProduct
News mentions
0No linked articles in our index yet.