Cross Site Scripting Vulnerability in Animati PACS Product

CVE-2025-1085

What is CVE-2025-1085?

A cross site scripting vulnerability has been identified in Animati PACS, affecting versions up to 1.24.12.09.03. This flaw allows an attacker to manipulate the 'p' parameter in the /login file, potentially enabling remote exploitation. Disclosures relating to this vulnerability indicate that it can be used to compromise web application security. It's imperative for users of Animati PACS to apply necessary updates and patches to mitigate this threat, as the issue has been made public without a response from the vendor.

References