CVE-2024-41597

ProcessWire version 3.0.229 is vulnerable to a Cross-Site Request Forgery (CSRF) flaw within its comments functionality. Inadequate handling of these requests allows a remote attacker to utilize a crafted HTML file to insert comments or, as stated in multiple security advisories, execute arbitrar...