THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-77830 (HIGH 7.2) — The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitization and output escaping. This makes it

[NVD] CVE-2026-77830 (HIGH 7.2) — The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitization and output escaping. This makes it

mednvdPublished 2026-09-05

CVE-2026-77830 CVSS: 7.2 HIGH Published: 2026-09-05T07:17:12.163

The Spam protection, Honeypot, Anti-Spam by CleanTalk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content aria-label Placeholder in all versions up to, and including, 6.86 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with custom-leve

Indicators of compromise

CVE-2026-77830cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-77830