CVE-2022-0388

The Interactive Medical Drawing of Human Body WordPress plugin through 1.0 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Date published : 2022-03-28

https://wpscan.com/vulnerability/7d4ad1f3-6d27-4655-9796-ce370ef5fced