CVE-2026-85541

MEDIUM CVSS 5.4 View on NVD ↗

Description

DreamMaker developed by Interinfo has a Reflected Cross-site Scripting vulnerability. Authenticated remote attackers can execute arbitrary JavaScript codes in user's browser via a malicious website.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

References

https://www.twcert.org.tw/en/cp-139-11184-9ad14-2.html
https://www.twcert.org.tw/tw/cp-132-11183-06a5e-1.html

Published: Sep 04, 2026 10:17 UTC Modified: Sep 04, 2026 17:17 UTC