CVE-2026-85207

Name of the Vulnerable Software and Affected Versions itsourcecode Online Medicine Delivery System version 1.0

Description A cross site scripting issue exists in the /index.php?q=orderdetails endpoint. This occurs when the location argument is manipulated, allowing a remote attacker to execute malicious scripts in the context of the user's browser.

Recommendations As a temporary workaround, restrict access to the /index.php?q=orderdetails endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.