Interactive Medical Drawing Of Human Body Vulnerabilities

[en] In the Linux kernel, the following vulnerability has been resolved: cifs: Release folio lock on fscache read hit. Under the current code, when cifs_readpage_worker is called, the call contract is that the callee should unlock the page. This is documented in the read_folio section of Documentation/filesystems/vfs...

Affected:

up to 2.6

Fix:

No patched version reported

Disclosed:

Oct 4, 2025

CVE-2023-53593 on NVD →

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVSS:

5.5

Affected:

up to 2.6

Fix:

No patched version reported

Disclosed:

Oct 2, 2025

CVE-2025-9332 on NVD →

The Interactive Medical Drawing of Human Body plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘anatomy_basic’ parameter in versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

CVSS:

6.1

Affected:

up to 2.4

Fixed in:

2.6

Disclosed:

Jun 17, 2022

The Interactive Medical Drawing of Human Body plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘anatomy_basic’ parameter in versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary...

Affected:

up to 2.6

Fixed in:

2.6

Disclosed:

Jun 17, 2022

[en] The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected:

up to 2.6

Fixed in:

2.6

Disclosed:

Mar 28, 2022

CVE-2022-0388 on NVD →

The Interactive Medical Drawing of Human Body WordPress plugin before 2.4 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

CVSS:

4.8

Affected:

up to 2.4

Fixed in:

2.4

Disclosed:

Mar 7, 2022

CVE-2022-0388 on NVD →

Affected:

up to 2.6

Fix:

No patched version reported

CVE-2025-9332 on NVD →