Vulnerabilty found in Chikitsa by "HAXSS" a Reinforcement Learning Agent for Cross Site Scripting (XSS) testing.
1. Log into the admin panel ('index.php/login/index').
2. Use the dashboard to navigate to the Add Patient page ('/patient/insert')
3. Edit the "Last Name" field on the page to a malicious payload
4. Save the settings
5. Navigate to any of 'patient/patient_report', 'patient/visit_report', 'patient/bill_detail_report' and the vulerbility is shown