Spam protection, Anti-Spam, FireWall by CleanTalk, CVE-2022-28221

CVE, Research URL: CVE-2022-28221
Home page URL: Security reports for Spam protection, Anti-Spam, FireWall by CleanTalk
Application: Spam protection, Anti-Spam, FireWall by CleanTalk
Published on: Apr 20, 2022
Research Description: The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Comments.php`
Affected versions: max 5.174.1.
Status: vulnerable