Vulnerabilities > Processwire > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-10-31 CVE-2022-40487 Cross-site Scripting vulnerability in Processwire 3.0.200
ProcessWire v3.0.200 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via the Search Users and Search Pages function.
network
low complexity
processwire CWE-79
6.1
6.1
2022-10-31 CVE-2022-40488 Cross-Site Request Forgery (CSRF) vulnerability in Processwire 3.0.200
ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).
network
low complexity
processwire CWE-352
6.5
6.5