CVE-2021-3672 is a cross-site scripting vulnerability in pycares affecting versions before 4.2.0. The flaw arises from improper neutralization of input during web page generation, potentially allowing an attacker to inject malicious scripts. The vulnerability has a CVSS 3.1 base score of 5.6, indicating a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability at a low level. The vulnerability is fixed in pycares version 4.2.0.

Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the affected application, potentially leading to limited confidentiality, integrity, and availability impacts. The CVSS score of 5.6 reflects a medium severity with a high attack complexity and no privileges or user interaction required.

Users should update pycares to version 4.2.0 or later to remediate this vulnerability. This is the official fix provided by the vendor.