90 matches found
ProcessWire vulnerable to Cross-Site Request Forgery
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
ProcessWire vulnerable to Cross-site Scripting
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
GHSA-VPWH-QMWC-2PHG ProcessWire vulnerable to Cross-Site Request Forgery
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
CVE-2022-40488
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
CVE-2022-40487
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
Cross site request forgery (csrf)
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
Cross site scripting
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
CVE-2022-40487: Improper Neutralization of Input During Web Page Generation
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
PT-2022-25404 · Unknown · Processwire
Name of the Vulnerable Software and Affected Versions: ProcessWire version 3.0.200 Description: A Cross-Site Request Forgery CSRF issue was discovered. Recommendations: For version 3.0.200, update to a newer version that contains a fix for this issue...
CVE-2022-40487
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
CVE-2022-40488
CVE-2022-40488 affects ProcessWire v3.0.200 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Several connected sources (Red Hat, GHSA, OSV, CVE listings, CNNVD) consistently state CSRF presence. Some entries reference the root cause as insufficient CSRF validation (e.g., a l...
CVE-2022-40487
CVE-2022-40487 : ProcessWire v3.0.200 is affected by multiple cross-site scripting (XSS) vulnerabilities in the Search Users and Search Pages functions, allowing an attacker to inject arbitrary web scripts or HTML through crafted payloads. This is documented across multiple sources (Red Hat, Vera...
CVE-2022-40487
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Search Users and Search Pages function. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via injection of a crafted payload...
PT-2022-25403 · Unknown · Processwire
Name of the Vulnerable Software and Affected Versions: ProcessWire version 3.0.200 Description: The issue allows attackers to execute arbitrary web scripts or HTML via injection of a crafted payload, leveraging multiple cross-site scripting XSS vulnerabilities. These vulnerabilities are...
CVE-2022-40488
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
CVE-2022-40488
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery CSRF...
Lfi-ProcessWire Cms 跨站请求伪造漏洞
Ryan Cramer Design Lfi-ProcessWire Cms is a free content management system Cms and framework Cmf from Ryan Cramer Design USA designed to save you time and work the way you want. A cross-site request forgery vulnerability exists in Lfi-ProcessWire Cms version v3.0.200, which stems from Althoug...
ProcessWire 跨站脚本漏洞
ProcessWire is a friendly and powerful open source CMS with a robust API. A cross-site scripting vulnerability exists in ProcessWire version v3.0.200, which originates from the Search Users and Search Functions pages and allows attackers to execute arbitrary web script or HTML by injecting a...