CVE-2026-115673
Anti-Spam by CleanTalk < 6.91 - Unauthenticated Stored XSS via Comment Author Email
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before 6.91 does not escape a commenter-supplied value before outputting it on an administrative spam-review screen, allowing unauthenticated users to inject arbitrary web scripts that execute in the browser of an administrator who reviews flagged comments.
| Vendor | unknown |
| Product | anti-spam, spam firewall by cleantalk |
| Published | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown anti-spam, spam firewall by cleantalk
Be the first to know when new unknown vulnerabilities affecting unknown anti-spam, spam firewall by cleantalk are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Anti-Spam, Spam FireWall by CleanTalk
0 < 6.91
References
Credits
Erwan LR (WPScan) WPScan