medium6.1
CVE-2025-54759
Sante PACS Server is vulnerable to stored cross-site scripting.
Impact
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Santesoft | Sante Pacs Server | before 4.2.3 |