CVE-2021-38151

Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.0

Description The issue is related to the index.php/appointment/todos endpoint in the Chikitsa Patient Management System, which allows for XSS attacks. This is due to the lack of protection measures for the web page structure. Exploitation of this issue can allow a remote attacker to impact the confidentiality and integrity of protected information.

Recommendations For Chikitsa Patient Management System version 2.0.0, consider disabling access to the index.php/appointment/todos endpoint until a patch is available to prevent potential XSS attacks.