Description
Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- ClinicCases 7.3.3 Cross-Site Scripting http/cves/2021/CVE-2021-38704.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.