Antispam

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-28222 MEDIUM POC This Month

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter in`/lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php`. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS WordPress Antispam

NVD

CVSS 3.1

6.1

EPSS

2.9%

CVE-2022-28221 MEDIUM This Month

The CleanTalk AntiSpam plugin <= 5.173 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP XSS WordPress Antispam

NVD

CVSS 3.1

6.1

EPSS

2.3%

CVE-2022-28222

EPSS 3% CVSS 6.1

MEDIUM POC This Month

PHP XSS WordPress +1

NVD

CVE-2022-28221

EPSS 2% CVSS 6.1

MEDIUM This Month

PHP XSS WordPress +1

NVD