Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-54861 EUVD-2026-3391GHSA-hxpq-9xvf-f22h

A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A speci…

Published Jan 20, 2026 · Updated Jan 21, 2026 · Assigned by talos

Description

A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
MedDream MedDream PACS Premium 7.3.6.870 —

References