EIP-2026-119679

This advisory details an Expression Language (EL) injection vulnerability in OpenMRS, where the 'personType' parameter in 'addPerson.htm' is not properly sanitized, allowing remote code execution by authenticated users. The document includes technical details, affected versions, and vendor fixes.