CVE Database /
CVE-2022-28222
CVE · Medium
CVE-2022-28222 — Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.174.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-28222
|
Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.174.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 5.174.1
|
5.174.1 |
2022-03-30 |
—
|
CVE-2022-28222
The CleanTalk Spam Protection plugin before version 5.174.1 contains a reflected cross-site scripting vulnerability where the page parameter is neither properly sanitized nor escaped before being output in HTML attributes on the comments editing page and users list dashboard. An attacker could exploit this flaw by crafting a malicious URL that executes arbitrary JavaScript in the context of a logged-in administrator's browser session.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings