Threats tagged 'ghsa-9fv5-8x99-44h3'

CVE-2026-85207 is a cross-site scripting (XSS) vulnerability in itsourcecode Online Medicine Delivery System version 1.0. The vulnerability arises from improper handling of the 'location' argument in the /index.php?q=orderdetails file, allowing remote attackers to inject malicious scripts. The exploit code is publicly available, but no known active exploitation in the wild has been reported. The vulnerability has a medium severity rating with a CVSS score of 5.1.