CVE-2026-115673

The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin, in versions before 6.91 , is vulnerable to unauthenticated stored XSS . The root cause is a failure to escape a commenter-supplied value before it is outputted on an administrative spam-review screen. An unauthenticated user can inject a...