ProcessWire vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-40487 · ADVISORY
• gist.github.com/filipaze/32ab8683af8d82827028164e361b6e86 · WEB
• processwire/processwire · PACKAGE
• processwire.com · WEB

processwire/processwire のその他の脆弱性

• CVE-2025-60790中 6.5ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted witho…
• CVE-2024-41597中 4.2Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by th…
• CVE-2023-24676高 7.2An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parame…
• CVE-2022-40488中 6.5ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).