Extension WordPress

Vulnérabilités Interactive Human Anatomy with Clickable Body Parts

Cette page rassemble les failles publiées pour Interactive Human Anatomy with Clickable Body Parts, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
2Avec correctif
6,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Interactive Human Anatomy with Clickable Body Parts

3 fiches

CVE-2025-9332 Moyenne · 5,5
Interactive Human Anatomy with Clickable Body Parts

Interactive Medical Drawing of Human Body <= 2.6 – Authenticated (Admin+) Stored Cross-Site Scripting

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes…

Versions affectées

*-2.6

Correctif

Non indiqué

Publication

02/10/2025

Vulnérabilité Moyenne · 6,1
Interactive Human Anatomy with Clickable Body Parts

Interactive Medical Drawing of Human Body <= 2.4 – Cross-Site Scripting

The Interactive Medical Drawing of Human Body plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘anatomy_basic’ parameter in versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it…

Versions affectées

*-2.4

Correctif

2.6

Publication

17/06/2022

CVE-2022-0388 Moyenne · 4,8
Interactive Human Anatomy with Clickable Body Parts

Interactive Medical Drawing of Human Body < 2.4 – Admin+ Stored Cross-Site Scripting

The Interactive Medical Drawing of Human Body WordPress plugin before 2.4 does not sanitise and escape the Link field, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Versions affectées

[*, 2.4)

Correctif

2.4

Publication

07/03/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités