Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-4411 EUVD-2025-22445GHSA-gwhg-pm8j-vgp3

XSS in Dataprom Informatics' PACS-ACSS

Published Jul 23, 2025 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting (XSS).

This issue affects PACS-ACSS: before 16.05.2025.

Affected products

VendorProductAffectedFixed
Dataprom Informatics PACS-ACSS < 16.05.2025 16.05.2025

References