CVE-2025-57881

Talos reports CVE-2025-57881: a post-auth reflected XSS in MedDream PACS Premium 7.3.6.870 via Pacs/modifyEmail.php, where the server parameter is echoed into HTML without sanitization. A crafted URL can trigger arbitrary JavaScript execution in the affected web interface. Vulnerable versions: Me...

CVE-2025-57881

A reflected cross-site scripting xss vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...

PT-2026-3609

A reflected cross-site scripting xss vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability...