Description
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Santesoft | Sante PACS Server | < 4.2.3 | 4.2.3 |
Advisories 1
- ICSMA-25-224-01 Santesoft Sante PACS Server CISA ICS & IT advisories · Aug 12, 2025