CVE-2021-42869: Chikitsa Patient Management Software

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patient/insert, (2) patient_report, (3) /appointment_report, (4) visit_report, and (5) /bill_detail_report pages.

Affected products

• Chikitsa Patient Management Software: version 2.0.2 only

Published 2022-03-31. Last modified 2026-06-17.