Medium severity6.1NVD Advisory· Published Apr 19, 2022· Updated Jun 17, 2026

CVE-2022-28221

Description

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php

Affected products

WordPress/CleanTalk AntiSpamllm-fuzzy
Range: <=5.173
CleanTalk/CleanTalk AntiSpamv5
Range: 5.173
Cleantalk/Antispam
cpe:2.3:a:cleantalk:antispam:*:*:*:*:*:wordpress:*:*
Range: <=5.173

Patches

Vulnerability mechanics

References

www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000