CVE-2026-85207: Itsourcecode Online Medicine Delivery System

Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was identified in itsourcecode Online Medicine Delivery System 1.0. Impacted is an unknown function of the file /index.php?q=orderdetails. Such manipulation of the argument location leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.

Affected products

• Itsourcecode Online Medicine Delivery System: version 1.0 only

Published 2026-09-03. Last modified 2026-09-05.