WordPress CleanTalk Anti-Spam – Complete Spam Protection plugin <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by daroo in WordPress Plugin Spam protection, AntiSpam, FireWall by CleanTalk versions = 6.89.1...

WordPress CleanTalk Anti cross-site scripting vulnerability

WordPress CleanTalk Anti versions 6.89.1 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping; it results in stored cross-site scripting via the ‘useremail’ parameter. Unauthenticated attackers can inject arbitrary web...

WordPress CleanTalk SQL Injection Vulnerability

Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...