CVE-2022-28221

CVE-2022-28221 affects the WordPress plugin CleanTalk AntiSpam / Spam protection, AntiSpam, FireWall by CleanTalk (versions

CVE-2022-28221 CleanTalk AntiSpam <= 5.173 Reflected XSS

The CleanTalk AntiSpam plugin = 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting XSS via the $REQUEST'page' parameter in/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php...

Reflected XSS in Spam protection, AntiSpam, FireWall by CleanTalk

Update - after this article was published, Denis Shagimuratov of CleanTalk reached out to us on Twitter. It appears that they didnt receive our disclosure because our contact at the company was no longer the correct recipient for this type of issue. On February 15, 2022, the Wordfence Threat...