CVE-2017-5631

6.1 mediumEPSS 4.5%

Medium (6.1) in kmc information systems caseaware. EPSS 4.5% chance of exploitation in the next 30 days.

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kmc_information_systems:caseaware

References

https://www.exploit-db.com/exploits/42042/
https://www.openbugbounty.org/incidents/228262/
https://www.exploit-db.com/exploits/42042/
https://www.openbugbounty.org/incidents/228262/

Check your stack JSON