Is CVE-2026-85541 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85541?

CVE-2026-85541 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-85541

Description

DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability. Authenticated remote attackers can execute arbitrary JavaScript codes in user's browser via a malicious website.