Interactive Medical Drawing of Human Body, CVE-2022-0388

CVE, Research URL: CVE-2022-0388
Home page URL: Security reports for Interactive Medical Drawing of Human Body
Application: Interactive Medical Drawing of Human Body
Published on: Mar 28, 2022
Research Description: The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected versions: max 2.6.
Status: vulnerable