cvedb.io
CVE-2025-63640
MEDIUM · CVSS 6.1
EPSS exploitation probability: 0%
Published 2025-11-07T20:15:38.243 · Last modified 2026-06-17T09:53:18.337

Summary

Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder", allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Save Reminder" button.

Affected products

rems — medicine_reminder_app

Does this affect you?

Add your gear to cvedb and we'll alert you only when rems ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.