CVE Database /
CVE-2022-28221
CVE · Medium
CVE-2022-28221 — Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.174.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-28221, CVE-2022-28222
|
Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.174.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 5.174.1
|
5.174.1 |
2022-03-30 |
—
|
CVE-2022-28221, CVE-2022-28222
The CleanTalk AntiSpam plugin up to version 5.173 contains a reflected cross-site scripting vulnerability through the $_REQUEST['page'] parameter in the Comments.php file located within the FindSpam ListTable directory. An attacker can exploit this flaw by injecting malicious scripts through the vulnerable parameter, which will be executed in the context of a user's browser session. The vulnerability has been addressed in version 5.174.1 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings