Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-54853 EUVD-2026-3395GHSA-cx24-hmph-49m8

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially…

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by talos

Description

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References