Threats affecting pkg:github/orthanc-server/orthanc-explorer-2

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-10173Orthanc Explorer 2 · Cross-site Scripting Medium5.3EPSS 0.3%2026-05-31CVE Database V5CVE-2026-10173 CVE-2026-10173 is a cross-site scripting (XSS) vulnerability in Orthanc Explorer 2 versions up to 1.12.0. The issue arises from improper handling of the 'remote-source' argument in the StudyList.vue component's URL Handler. This vulnerability can be exploited remotely and the exploit code is publicly available. The CVSS 4.0 score rates this as a medium severity issue. A patch identified by commit 21f78ce5da668bf5233efcd1896ec7c6e3b22eae is recommended to remediate the vulnerability. EPSS 0.3%Vulnerability	CVE Database V5	2026-05-31

Page 1 of 1