Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user’s cookie. This vulnerability poses a risk to user data and privacy.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-54759 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious HTML payload and find a way to inject it into the Sante PACS Server. This could be done through user input fields that do not properly sanitize input, allowing the attacker to redirect users to a malicious site and potentially steal their cookies.
Affected Products
- Sante PACS Server: A medical imaging management system that is susceptible to stored XSS attacks, allowing for potential data theft.
Mitigation
To mitigate this vulnerability, it is essential to implement proper input validation and output encoding to prevent the injection of malicious scripts. Regular updates and patches should also be applied to the Sante PACS Server to address any known vulnerabilities.