cleantalk Vulnerabilities and Affected Products
Vulnerabilities associated with CleanTalk AntiSpam.
Products
Clear product- Login Security, FireWall, Malware removal by CleanTalk4 vulnerabilities
- antispam3 vulnerabilities
- Spam protection, Honeypot, Anti-Spam by CleanTalk3 vulnerabilities
- CleanTalk AntiSpam2 vulnerabilities
- security_\&_malware_scan2 vulnerabilities
- spam_protection\,_antispam\,_firewall2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-28222MEDIUM | CleanTalk AntiSpam <= 5.173 Reflected XSSThe CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php` CWE-79Apr 19, 2022 | CVSS6.1v3.1 | EPSS2.89% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-28221MEDIUM | CleanTalk AntiSpam <= 5.173 Reflected XSSThe CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php` CWE-79Apr 19, 2022 | CVSS6.1v3.1 | EPSS2.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |