OpenEMR versions prior to 8.0.0.2 contain a stored cross-site scripting vulnerability that permits authenticated portal users to compromise staff browser sessions.

This is a stored cross-site scripting (CWE-79) vulnerability located in the patient portal payment flow. An authenticated user can inject malicious JavaScript via the portal/lib/paylib.php script, which is then executed without proper escaping when a staff member views the submission in portal/portal_payment.php.

Successful exploitation allows an attacker to execute arbitrary code within the browser of staff members, potentially leading to session hijacking, unauthorized access to sensitive patient health information, or administrative actions performed on behalf of the staff. With a CVSS score of 8.7, this flaw represents a high risk to data confidentiality and integrity, particularly in clinical environments where staff accounts possess elevated privileges.

Immediate Action: Update OpenEMR to version 8.0.0.2 or later to apply the necessary input sanitization fixes.

Proactive Monitoring: Review web server access logs for anomalous requests directed at the patient portal payment modules and monitor for unexpected script execution or unauthorized interactions within staff-facing administrative interfaces.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to detect and block common XSS injection patterns.

Public Exploit Available: No

Given the potential for unauthorized access to sensitive electronic health records, administrators should prioritize the deployment of the 8.0.0.2 update immediately. Failure to patch this vulnerability leaves the organization susceptible to cross-site scripting attacks that could compromise both staff credentials and patient data integrity.