CVE-2025-53707
BaseFortify
Publication date: 2026-01-20
Last updated on: 2026-01-29
Assigner: Talos
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| meddream | pacs_server | 7.3.6.870 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-53707 is a reflected cross-site scripting (XSS) vulnerability in the modifyTranscript functionality of MedDream PACS Premium version 7.3.6.870. It occurs because the 'name' parameter in the Pacs/modifyTranscript.php script is included directly in the HTML output without sanitization or encoding. An attacker can craft a malicious URL containing JavaScript code in the 'name' parameter, which when accessed by a user, causes arbitrary JavaScript code to execute in the victim's browser. This can happen without any user login required. [1]
How can this vulnerability impact me? :
This vulnerability can allow an attacker to execute arbitrary JavaScript code in the browser of a user who clicks on a specially crafted malicious URL. This can lead to theft of sensitive information, session hijacking, or other malicious actions performed in the context of the victim's session. Since the vulnerability is pre-authentication and network exploitable, it can be triggered remotely without credentials, potentially compromising user data confidentiality and integrity. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending a specially crafted HTTP GET request to the modifyTranscript.php script with a malicious payload in the 'name' parameter and observing if the script is executed. For example, you can use the following curl command to test for the vulnerability: curl -i "http://<target>/Pacs/modifyTranscript.php?name=<script>alert(1)</script>". If the response contains the injected script tag without sanitization, the system is vulnerable. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the vendor's patch released on December 5, 2025, which addresses this vulnerability. Until the patch is applied, restrict access to the affected modifyTranscript.php functionality, implement web application firewall (WAF) rules to block requests containing suspicious script tags in the 'name' parameter, and educate users to avoid clicking on untrusted URLs. [1]