Vulnerability Details CVE-2024-41597
Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by the Supplier because the product intentionally accepts anonymous, unauthenticated comments and thus there are fewer situations in which CSRF would be a useful attack technique. Also, the submitted comments are, by default, held for moderator review.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 11.3%
CVSS Severity
CVSS v3 Score 4.2
References
Products affected by CVE-2024-41597
-
cpe:2.3:a:processwire:processwire:3.0.229