CVE-2022-40488 - ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF)

MEDIUM

ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF)

Published Oct 31, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.29%

ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
http://processwire.com
https://gist.github.com/filipaze/76138289ded98aa45dfcd939a8afd331		PatchThird Party Advisory
https://github.com/advisories/GHSA-vpwh-qmwc-2phg		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-40488

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Oct 31, 2022

Updated Jul 9, 2026

Reserved Sep 11, 2022

Updated May 6, 2025

Status Modified

Modified Jul 9, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a