Is CVE-2026-85205 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85205?

CVE-2026-85205 has a CVSS v3 severity of MEDIUM (6.3).

Back

CVE-2026-85205

Description

A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file /customer/controller.php?action=addwish of the component Wishlist. This manipulation of the argument proid causes sql injection. The attack may be initiated remotely.