CVE-2022-28221

MEDIUM

CleanTalk AntiSpam <= 5.173 Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2022-28221 has a selected CVSS score of 6.1 (medium).

Description

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 7, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

CleanTalk AntiSpam

Browse CleanTalk / CleanTalk AntiSpam
CVE List5.173 to ≤ 5.173affected

References

2