ProcessWire vulnerable to Cross-Site Request Forgery

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-40488 · ADVISORY
• gist.github.com/filipaze/76138289ded98aa45dfcd939a8afd331 · WEB
• processwire/processwire · PACKAGE
• processwire.com · WEB

processwire/processwire 的其他漏洞

• CVE-2025-60790中危 6.5ProcessWire CMS 3.0.246 allows a low-privileged user with lang-edit to upload a crafted ZIP to Language Support that is auto-extracted witho…
• CVE-2024-41597中危 4.2Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by th…
• CVE-2023-24676高危 7.2An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parame…
• CVE-2022-40487中危 6.1ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages fun…