CVE-2024-41597

Publication date

2024-07-19 00:00:00

Family

mitre

State

PUBLISHED

Description

Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to execute arbitrary code via a crafted HTML file to the comments functionality.