CVE-2021-38706: Cliniccases

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.

Affected products

• Cliniccases Cliniccases: version 7.3.3 only

Published 2021-09-07. Last modified 2026-06-17.