CVE-2022-0388 | BDVDB-2026-172649 Detail

Interactive Medical Drawing of Human Body

Description#

The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/7d4ad1f3-6d27-4655-9796-ce370ef5fced

Exploit#

No public exploit known

History#

Version 12022-03-28Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.