CVE-2026-85541

DreamMaker, developed by Interinfo, contains a reflected cross-site scripting vulnerability that allows authenticated remote attackers to execute arbitrary JavaScript in users' browsers through malicious websites. This could lead to session hijacking, data theft, or other malicious actions. Organizations using DreamMaker should prioritize addressing this vulnerability to protect their users from potential exploitation.