← CVE Intelligence

CVE-2025-54853

MedDream / MedDream PACS Premium PUBLISHED

Description (CNA)

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
MedDream / MedDream PACS Premiumaffected 7.3.6.870

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.