CVE-2020-11436

9.0 criticalEPSS 1.3%

Critical (9.0) in librehealth librehealth ehr. EPSS 1.3% chance of exploitation in the next 30 days.

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.

Severity

9.0 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-07-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19