Medium severity6.1NVD Advisory· Published Sep 7, 2021· Updated Jun 17, 2026

CVE-2021-38704

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

ClinicCases/ClinicCasesdescription
ClinicCases/ClinicCasesllm-create
Range: <7.3.3

Patches

Vulnerability mechanics

References

github.com/judsonmitchell/ClinicCases/releasesnvdRelease NotesThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000