Rems vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rems products: 2 record(s), with severity, exploitation and fixes.

Leads Manager Tool 1 Medicine Reminder App 1

Exploited only (KEV) →

CVE-2025-63640 Medium · 6.1 CWE-79 Nov 7, 2025

Cross-site Scripting (XSS) in Rems Medicine Reminder App

Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder", allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Save Reminder" button.

CVE-2025-63716 Medium · 6.5 CWE-352 Nov 7, 2025

Cross-Site Request Forgery (CSRF) in Rems Leads Manager Tool

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints.