PT-2024-29454 · Unknown · Processwire

Name of the Vulnerable Software and Affected Versions: ProcessWire version 3.0.229 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality. Recommendations: For version 3.0.229, update to a newer...