A vulnerability was found in OpenEMR up to 8.0.0.2. It has been classified as problematic. The affected element is an unknown function in the library portal/lib/paylib.php. The manipulation leads to cross site scripting.
This vulnerability is uniquely identified as CVE-2026-33346. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.
