Online Clinic Management System version 2.2 suffers from multiple persistent cross site scripting vulnerabilities.