Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-67604
HistoryApr 01, 2022 - 12:00 a.m.

WordPress CleanTalk plugin cross-site scripting vulnerability

2022-04-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.001 Low

EPSS

Percentile

34.0%

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress application plugin. WordPress CleanTalk plugin 5.173 and earlier versions have a cross-site scripting vulnerability that originates in /lib/Cleantalk/ ApbctWP/FindSpam/ListTable/Users.php. The page parameter in the column_ct_username function in /lib/Cleantalk/FindSpam/ListTable/Users.php lacks input and output data validation filters. An attacker could exploit this vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
wordpress cleantalk pluginle5.173

0.001 Low

EPSS

Percentile

34.0%