MedDream PACS Premium Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in MedDream PACS Premium version 7.3.6.870, specifically within the fetchPriorStudies functionality. This vulnerability allows for the execution of arbitrary JavaScript code via a specially crafted URL. The issue arises because the uid parameter is not properly sanitized before being outputted into the HTML, enabling attackers to inject malicious scripts.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a GET request to the Pacs/fetchPriorStudies.php endpoint with a crafted uid parameter that includes JavaScript code, such as a script tag containing JavaScript. The remoteae parameter must also be included. The injected script will be executed in the user's browser when the response is received.

Remediation

Users are advised to update to the patched version released by the vendor on December 5, 2025.