CVE-2021-38704

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by…

published September 7, 2021

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03521 · 89.2th percentile
Published
2021-09-07T19:21Z
EPSS history
Timeline
  • 07 SEP 19:21Z
    Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by…
    cvelistv5