CVE-2025-57881

A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.

• CWE-79

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2263Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2263Exploit, Third Party Advisory

Published

Jan 20, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-57876There is a stored Cross-site Scripting vulnerability in Esr…4.8
• CVE-2025-57877There is a reflected cross site scripting vulnerability in E…4.8
• CVE-2025-57878There is an unvalidated redirect vulnerability in Esri Porta…6.1
• CVE-2025-57879There is an unvalidated redirect vulnerability in Esri Porta…6.1
• CVE-2025-5788A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.11…6.5
• CVE-2025-57880Improper Encoding or Escaping of Output vulnerability in Hal…5.4
• CVE-2025-57882An improper resource shutdown or release vulnerability has b…8.2
• CVE-2025-57883Reflected cross-site scripting vulnerability exists in Group…6.1
• CVE-2025-57884Missing Authorization vulnerability in wpsoul Greenshift gre…4.3
• CVE-2025-57885Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan…4.3
• CVE-2025-57886Authorization Bypass Through User-Controlled Key vulnerabili…5.4
• CVE-2025-57887Improper Neutralization of Input During Web Page Generation …6.5