Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
| Software | From | Fixed in |
|---|---|---|
| santesoft / sante_pacs_server | - | 4.2.3 |