CVE-2022-28221
CleanTalk AntiSpam <= 5.173 Reflected XSS
Summary
CleanTalk AntiSpam <= 5.173 Reflected XSS
Original description
The description as published by the source.
The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php
References
- advisory github.com
- advisory nvd.nist.gov
- web wordfence.com