WordPress Plugin Vulnerabilities

Anti-Spam by CleanTalk < 5.127.4 - Cross-Site Scripting Issue

Description

The Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin was affected by a Cross-Site Scripting Issue security vulnerability.

Affects Plugins

Plugin icon
cleantalk-spam-protect
Fixed in 5.127.4

References

CVE
CVE-2019-17515

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Verified
No
WPVDB ID
204e9fcd-6fd4-462d-a422-5e420ebca3a0

Timeline

Publicly Published
2019-11-12 (about 6 years ago)
Added
2019-11-14 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-01-16
Title
Integrate Dynamics 365 CRM < 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Field Mapping Configuration
Published
2024-03-18
Title
Tourfic < 2.11.8 - Reflected Cross-Site Scripting
Published
2024-03-12
Title
WP Go Maps (formerly WP Google Maps) < 9.0.33 - Contributor+ Stored Cross-Site Scripting via Shortcode
Published
2020-08-29
Title
Real Estate 7 < 3.0.5 - Unauthenticated Reflected XSS
Published
2021-08-10
Title
Picture Gallery < 1.4.4 - Authenticated Stored XSS