Read the docs

cleantalk

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

cleantalk records in CISA KEV

No cleantalk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Antispam · all components

TI-2022-11008 CVE-2022-28222 · GHSA-cq7c-g6cg-x8m6

CleanTalk AntiSpam <= 5.173 Reflected XSS

Priority LOW 33

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02931 Published 2022-04-19 No fix listed CWE-79
TI-2022-11007 CVE-2022-28221 · GHSA-vrxh-fr4w-j852

CleanTalk AntiSpam <= 5.173 Reflected XSS

Priority LOW 32

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02396 Published 2022-04-19 No fix listed CWE-79
Open these records in search →