Lucene search
PRIOn knowledge basePRION:CVE-2019-17515HistoryNov 13, 2019 - 9:15 p.m.
Cross site scripting
2019-11-1321:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
32.7%
The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and inc/cleantalk-comments.php. The attack vector is: When the Administrator is logged in, a reflected XSS may execute upon a click on a malicious URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| spam_protection\\,_antispam\\,_firewall | lt | 5.127.4 |
Related
nvd
nvd
CVE-2019-17515
2019-11-13 21:15:12
cve
cve
CVE-2019-17515
2019-11-13 21:15:12
openvas
openvas
wpvulndb
wpvulndb
Anti-Spam by CleanTalk < 5.127.4 - Cross-Site Scripting Issue
2019-11-12 00:00:00
patchstack
patchstack
cvelist
cvelist
CVE-2019-17515
2019-11-13 20:08:30