CVE-2025-54853 in PACS Premiuminformation

Résumé

par MITRE • 20/01/2026

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Divulgation

20/01/2026

Modérer

accepté

Entrée

VDB-342009

CPE

prêt

EPSS

0.00235

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!