PT-2019-15180

Name of the Vulnerable Software and Affected Versions cleantalk-spam-protect plugin versions prior to 5.127.4 Description The issue allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. This is possible when the Administrator is logged in and a reflected...

CVE-2019-17515: Improper Neutralization of Input During Web Page Generation

The CleanTalk cleantalk-spam-protect plugin before 5.127.4 for WordPress is affected by: Cross Site Scripting XSS. The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter. The component is: inc/cleantalk-users.php and...