Detections
Analytics
CVE-2022-0388
medium
Description
The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
References
https://wpscan.com/vulnerability/7d4ad1f3-6d27-4655-9796-ce370ef5fced