CVE-2025-54862: Santesoft Sante Pacs Server

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

Affected products

• Santesoft Sante Pacs Server: before 4.2.3 (fixed in 4.2.3)

Published 2025-08-18. Last modified 2026-06-17.