← CVE Intelligence

CVE-2025-58089

MedDream / MedDream PACS Premium PUBLISHED

Description (CNA)

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the longtermdir parameter.

Affected (CNA)

Vendor / productVersions
MedDream / MedDream PACS Premiumaffected 7.3.6.870

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.