Unrated severityNVD Advisory· Published Nov 6, 2026

CVE-2026-115673

Description

The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied value before outputting it on an administrative spam-review screen, allowing unauthenticated users to inject arbitrary web scripts that execute in the browser of an administrator who reviews flagged comments.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Anti-Spam, Spam FireWall by CleanTalkllm-create
Range: <6.91

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/087d91ac-2158-4f9b-8fab-4d17b14a7053/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000