Unrated severityNVD Advisory· Published Apr 19, 2022· Updated Feb 7, 2025

CleanTalk AntiSpam <= 5.173 Reflected XSS

CVE-2022-28222

Description

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php

Affected products

WordPress/CleanTalk AntiSpamllm-fuzzy
Range: <=5.173
CleanTalk/CleanTalk AntiSpamv5
Range: 5.173

Patches

Vulnerability mechanics

References

www.wordfence.com/blog/2022/03/reflected-xss-in-spam-protection-antispam-firewall-by-cleantalk/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000