Vendors / Chikitsa Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Chikitsa records in CISA KEV No Chikitsa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious PHP plugins through the module upload functionality.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00975 · Published 2026-01-15 · No fix listed CWE-434
Priority HIGH 73
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00884 · Published 2026-01-15 · No fix listed CWE-434
Priority LOW 26
index.php/appointment/insert_patient_add_appointment in Chikitsa Patient Management System 2.0.0 allows XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01016 · Published 2021-08-06 · No fix listed CWE-79
Priority LOW 26
index.php/admin/add_user in Chikitsa Patient Management System 2.0.0 allows XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00664 · Published 2021-08-06 · No fix listed CWE-79
Priority LOW 25
index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00618 · Published 2021-08-06 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High2 Medium5 Low0 No CVSS0