CVE-2021-42868: Chikitsa Patient Management Software

Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointment_report, (4) visit_report, and (5) bill_detail_report pages. .

Affected products

  • Chikitsa Patient Management Software: version 2.0.2 only

Published 2022-03-31. Last modified 2026-07-09.