Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-46270 EUVD-2026-3399GHSA-4p2g-vp74-5w46

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A sp…

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by talos

Description

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References