EIP-2026-110288

This exploit demonstrates multiple reflected XSS vulnerabilities in OpenEMR 4.0.0 by injecting malicious JavaScript payloads into URL parameters. The PoC includes specific URLs with script tags that trigger arbitrary code execution in the context of the affected site.