WordPress Interactive Medical Drawing of Human Body plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Interactive Medical Drawing of Human Body plugin version 2.6 previously had a cross-site scripting vulnerability The vulnerability stems from a failure to clean and escape link fields. An attacker could exploit this vulnerability to perform cross-site scripting attacks if the unfiltered_html feature is disabled.