CVE-2024-41597

ProcessWire v.3.0.229 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability within its comments functionality. Inadequate handling of these comments allows a remote attacker to perform actions on behalf of another user, such as inserting comments. Some documentation further indicates...