Vulnerabilidades de Rems

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Rems: 2 registro(s), com severidade, exploração e correções.

Leads Manager Tool 1 Medicine Reminder App 1

Somente exploradas (KEV) →

CVE-2025-63640 Média · 6.1 CWE-79 07/11/2025

Cross-site Scripting (XSS) em Rems Medicine Reminder App

Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder", allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Save Reminder" button.

CVE-2025-63716 Média · 6.5 CWE-352 07/11/2025

Cross-Site Request Forgery (CSRF) em Rems Leads Manager Tool

The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints.