Threats tagged 'ghsa-xvj9-569f-63gr'

A vulnerability in the Anti-Spam, Spam FireWall by CleanTalk WordPress plugin before version 6.91 allows unauthenticated users to inject arbitrary web scripts via a commenter-supplied value. This value is not properly escaped before being displayed on an administrative spam-review screen, leading to potential cross-site scripting (XSS) attacks against administrators reviewing flagged comments.