Fictional Application
CarePulse Telehealth Desk
Confidential Clinical Patient Helpdesk & Triage
CarePulse is a telehealth platform where patients submit priority medical tickets. Due to healthcare regulations, an automated compliance officer bot (Dr. Sarah Jenkins) reviews submitted tickets every few seconds using an administrative session token. Your goal is to demonstrate stored XSS that executes within this privileged context.
🎯 Assessment Objective
Submit a ticket containing an XSS payload and observe execution when the simulated compliance officer reviews the ticket.
Educational Guidance: Treat this lab like an authorized penetration test. Analyze user-controlled parameters, review browser source code and developer tools, and discover how input is handled.