KMCIS CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in the login.php query string.
View the template here CVE-2017-5631.yaml
echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2017/CVE-2017-5631.yaml
References: