Interactive Medical Drawing of Human Body, 4768f43207335b2673a0a7bb3a64903dff8bd6b3

CVE, Research URL: 4768f43207335b2673a0a7bb3a64903dff8bd6b3
Home page URL: Security reports for Interactive Medical Drawing of Human Body
Application: Interactive Medical Drawing of Human Body
Published on: Jun 17, 2022
Research Description: Interactive Medical Drawing of Human Body [interactive-medical-drawing-of-human-body] < 2.6 (closed) Interactive Medical Drawing of Human Body <= 2.4 - Cross-Site Scripting The Interactive Medical Drawing of Human Body plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘anatomy_basic’ parameter in versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 2.6.
Status: vulnerable