CVE-2020-11436: Librehealth Ehr

Critical severity, CVSS 9.0. EPSS: 1.3% chance of exploitation in the next 30 days.

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators.

Affected products

• Librehealth Librehealth Ehr: version 2.0.0 only

Published 2020-07-15. Last modified 2026-06-17.