Cross site scripting

index.php/appointment/todos in Chikitsa Patient Management System 2.0.0 allows XSS...