Security OpenMRS 2.1 Access Bypass / XSS / CSRF October 20, 2014 007admin Leave a comment OpenMRS version 2.1 suffers from access bypass, cross site request forgery, and cross site scripting vulnerabilities.