A reflected cross-site scripting (XSS) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium version 7.3.5.860. This vulnerability allows an attacker to craft a malicious URL that, when visited by a user, can execute arbitrary JavaScript code in the context of the victim's browser.