cve/2021/CVE-2021-38704.md
2024-05-25 21:48:12 +02:00

787 B

CVE-2021-38704

Description

Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.

POC

Reference

No PoCs from references.

Github