Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-54814 EUVD-2026-3389GHSA-mp89-xq5g-39g9

A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. …

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by talos

Description

A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References