Chikitsa

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Chikitsa records in CISA KEV

No Chikitsa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Patient Management System 5 records HIGH Patient Management Software 2 records LOW

Records

7 records

TI-2021-22375 CVE-2021-47758 · GHSA-wqg6-793x-j3cp

Chikitsa Patient Management System 2.0.2 - Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00975 Published 2026-01-15 No fix listed CWE-434

TI-2021-22374 CVE-2021-47757 · GHSA-8f5x-4gfr-8fxp

Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)

HIGH 73

Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00884 Published 2026-01-15 No fix listed CWE-434

TI-2021-15832 CVE-2021-38152 · GHSA-mwc9-pj88-mr4v

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01016 Published 2021-08-06 No fix listed CWE-79

TI-2021-15829 CVE-2021-38149 · GHSA-pq6g-v7vx-m549

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 26

index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2021-08-06 No fix listed CWE-79

TI-2021-15831 CVE-2021-38151 · GHSA-jx3v-8cwq-743v

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

LOW 25

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00618 Published 2021-08-06 No fix listed CWE-79

TI-2021-19023 CVE-2021-42869 · GHSA-g767-h223-fph3

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

LOW 23

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patient/insert, (2) patient_report, (3) /appointment_report, (4) visit_report, and (5…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00552 Published 2022-03-31 No fix listed CWE-79

TI-2021-19022 CVE-2021-42868 · GHSA-fgg4-3hhm-6qmq

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software…

LOW 23

A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointment_report, (4) visit_report, and (5) bil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00514 Published 2022-03-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	5
Low	0
No CVSS	0