Security Advisory
CVE-2015-4591
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter.