PT-2025-45497 · Sourcecodester · Medicine Reminder App

Published 2025-11-07 · Updated 2025-11-07 · CVE-2025-63640

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sourcecodester Medicine Reminder App version 1.0

Description The application is susceptible to Cross-Site Scripting (XSS). An attacker can inject potentially malicious HTML/JavaScript code into the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder". This code executes in the victim's browser when the "Save Reminder" button is clicked. The vulnerable parameters are Medicine Name and Notes (Optional).

Recommendations Apply input validation and output encoding to the Medicine Name and Notes (Optional) fields to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-63640

Affected Products

Medicine Reminder App

References · 6

• 🔥 https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63640/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63640 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63640 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1986897827247657358 · Twitter Post
• https://sourcecodester.com/javascript/18402/medicine-reminder-app-using-html-css-and-javascript-source-code.html · Note
• https://twitter.com/CVEnew/status/1986894743096131806 · Twitter Post