CVE-2022-28221
CleanTalk AntiSpam <= 5.173 Reflected XSS
概要
CleanTalk AntiSpam <= 5.173 Reflected XSS
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web wordfence.com