ProcessWire CMS vulnerable to resource-exhaustion Denial of Service

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-60790 · ADVISORY
• processwire/processwire-issues · WEB
• NomanProdhan/security-vulnerability-research · WEB
• processwire/processwire · PACKAGE

Mais vulnerabilidades de processwire/processwire

• CVE-2024-41597MÉDIO 4.2Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by th…
• CVE-2023-24676ALTO 7.2An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parame…
• CVE-2022-40488MÉDIO 6.5ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
• CVE-2022-40487MÉDIO 6.1ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages fun…