CVE-2025-35029

Medium · 5.4

CVSS

5.4

EPSS

0.2%

Published

Nov 20, 2025

CISA due date

—

The record

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of 2025-03-14.

Affected packages

Ecosystem	Package	Introduced	Fixed