Description index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS. References https://chikitsa.net/ https://github.com/jboogie15/CVE-2021-38149