CVE-2025-53854

CVE-2025-53854 affects MedDream PACS Premium 7.3.6.870. Cisco Talos details a post-authentication, reflected XSS vulnerability in Pacs/modifyHL7Route.php where the value of the source parameter is written into HTML output without sanitization. An attacker can craft a URL to trigger arbitrary Java...