medium4.2
CVE-2024-41597
ProcessWire Cross Site Request Forgery vulnerability
Impact
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | processwire/processwire | <= 3.0.229 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Processwire | Processwire | Version 3.0.229 |