Lucene search
K

219 matches found

NVD
NVD
added 2022/04/19 9:15 p.m.13 views

CVE-2022-28222

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

6.1CVSS0.02959EPSS
Exploits3References1
NVD
NVD
added 2022/04/19 9:15 p.m.25 views

CVE-2022-28221

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

6.1CVSS0.02362EPSS
Exploits2References1
OSV
OSV
added 2022/04/19 9:15 p.m.16 views

CVE-2022-28221

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

6.1CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2022/04/19 9:15 p.m.18 views

Cross site scripting

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

4.3CVSS6AI score0.02362EPSS
Exploits2References1Affected Software1
Prion
Prion
added 2022/04/19 9:15 p.m.18 views

Cross site scripting

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

4.3CVSS6AI score0.02959EPSS
Exploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/19 8:26 p.m.8 views

CVE-2022-28222 CleanTalk AntiSpam <= 5.173 Reflected XSS

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

6.1CVSS6AI score0.02959EPSS
Exploits3References1
CVE
CVE
added 2022/04/19 8:26 p.m.78 views

CVE-2022-28222

The CleanTalk AntiSpam WordPress plugin

6.1CVSS6AI score0.02959EPSS
Exploits3References1Affected Software1
Cvelist
Cvelist
added 2022/04/19 8:26 p.m.21 views

CVE-2022-28222 CleanTalk AntiSpam <= 5.173 Reflected XSS

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php...

6.1CVSS6.2AI score0.02959EPSS
Exploits3References1
Vulnrichment
Vulnrichment
added 2022/04/19 8:26 p.m.8 views

CVE-2022-28221 CleanTalk AntiSpam <= 5.173 Reflected XSS

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

6.1CVSS6AI score0.02362EPSS
Exploits2References1
Cvelist
Cvelist
added 2022/04/19 8:26 p.m.29 views

CVE-2022-28221 CleanTalk AntiSpam <= 5.173 Reflected XSS

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

6.1CVSS6.2AI score0.02362EPSS
Exploits2References1
CVE
CVE
added 2022/04/19 8:26 p.m.82 views

CVE-2022-28221

CVE-2022-28221 affects the WordPress plugin CleanTalk AntiSpam / Spam protection, AntiSpam, FireWall by CleanTalk (versions

6.1CVSS6AI score0.02362EPSS
Exploits2References1Affected Software1
CNVD
CNVD
added 2022/04/01 12:0 a.m.18 views

WordPress CleanTalk plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress CleanTalk plugin 5.173 and earlier versions have a cross-sit...

6.1CVSS2AI score0.02959EPSS
Exploits3References1
CNVD
CNVD
added 2022/04/01 12:0 a.m.27 views

WordPress CleanTalk plugin cross-site scripting vulnerability (CNVD-2022-67605)

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress CleanTalk plugin 5.173 and earlier versions have a cross-sit...

6.1CVSS2AI score0.02362EPSS
Exploits2References1
OSV
OSV
added 2022/03/30 6:23 p.m.4 views

DRUPAL-CONTRIB-2022-032

This module provides integration with the CleanTalk spam protection service. The module does not properly filter data in certain circumstances. Update: 2022-03-31 - fix release node links...

6.8AI score
Exploits0References1
Wordfence Blog
Wordfence Blog
added 2022/03/30 1:11 p.m.20 views

Reflected XSS in Spam protection, AntiSpam, FireWall by CleanTalk

Update - after this article was published, Denis Shagimuratov of CleanTalk reached out to us on Twitter. It appears that they didnt receive our disclosure because our contact at the company was no longer the correct recipient for this type of issue. On February 15, 2022, the Wordfence Threat...

4.3CVSS0.3AI score0.02959EPSS
Exploits3
Packet Storm
Packet Storm
added 2022/03/30 12:0 a.m.292 views

WordPress CleanTalk 5.173 Cross Site Scripting

Description: Reflected Cross-Site Scripting Affected Plugin: Spam protection, AntiSpam, FireWall by CleanTalk Plugin Slug: cleantalk-spam-protect Plugin Developer: CleanTalk Affected Versions: = 5.173 CVE ID: CVE-2022-28221 CVSS Score: 6.1 Medium CVSS Vector:...

6.2AI score0.02959EPSS
Exploits3
0day.today
0day.today
added 2022/03/30 12:0 a.m.227 views

WordPress CleanTalk 5.173 Cross Site Scripting Vulnerability

Description: Reflected Cross-Site Scripting Affected Plugin: Spam protection, AntiSpam, FireWall by CleanTalk Plugin Slug: cleantalk-spam-protect Plugin Developer: CleanTalk Affected Versions: = 5.173 CVE ID: CVE-2022-28221 CVSS Score: 6.1 Medium CVSS Vector:...

6.1CVSS6.2AI score0.02959EPSS
Exploits3
Patchstack
Patchstack
added 2022/03/30 12:0 a.m.28 views

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 5.174 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ramuel Gall Wordfence in WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin versions = 5.174. Solution Update the WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin to the latest available version at leas...

6.1CVSS2.8AI score0.02362EPSS
Exploits2References3Affected Software1
Patchstack
Patchstack
added 2022/03/30 12:0 a.m.23 views

WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin <= 5.174 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Ramuel Gall Wordfence in WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin versions = 5.174. Solution Update the WordPress Spam protection, AntiSpam, FireWall by CleanTalk plugin to the latest available version at leas...

6.1CVSS2.8AI score0.02959EPSS
Exploits3References3Affected Software1
WPVulnDB
WPVulnDB
added 2022/03/30 12:0 a.m.22 views

Spam protection, AntiSpam, FireWall by CleanTalk < 5.174.1 - Reflected Cross-Site Scripting

The plugin does not not sanitise and escape the page parameter brief outputting it back in attributes in the /wp-admin/edit-comments.php?page=ctcheckspam and Users list dashboard, leading to Reflected Cross-Site Scripting issues...

6.1CVSS2.2AI score0.02959EPSS
Exploits3References1Affected Software1
Rows per page
Query Builder