---
id: CVE-2021-42868
title: >-
  A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient
  Management Software 2.0.2 in the first_name parameter in (1) patient/insert,
  (2) patient_report, (3) appointment_report, (4) visit_report, and (5)
  bill_detail_report p…
summary: >-
  A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient
  Management Software 2.0.2 in the first_name parameter in (1) patient/insert,
  (2) patient_report, (3) appointment_report, (4) visit_report, and (5)
  bill_detail_report p…
severity: medium
cvss: 4.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N'
cwe:
  - CWE-79
vendor: chikitsa
product: patient_management_software
affected:
  - patient_management_software = 2.0.2
published: '2022-03-31'
updated: '2026-07-05'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2021-42868'
references:
  - url: 'http://rlsec.xyz/vulns/CVE_2021_42868.html'
    label: cve@mitre.org
  - url: 'http://chikista.com'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rlsec.xyz/vulns/CVE_2021_42868.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00514
epssPercentile: 0.41257
ingestedAt: '2026-07-06T17:03:24.131Z'
---

## Overview

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointment_report, (4) visit_report, and (5) bill_detail_report pages. .

## Affected

- `patient_management_software = 2.0.2`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.