CVE-2026-85541
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Sep 04, 2026
Vendor
unknown
Description
DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability. Authenticated remote attackers can execute arbitrary JavaScript codes in user's browser via a malicious website.