CVE-2024-41597

Cross Site Request Forgery vulnerability in ProcessWire v.3.0.229 allows a remote attacker to insert a comment. NOTE: this is disputed by the Supplier because the product intentionally accepts anonymous, unauthenticated comments and thus there are fewer situations in which CSRF would be a useful attack technique. Also, the submitted comments are, by default, held for moderator review.

• CWE-352

• https://gist.github.com/DefensiumDevelopers/608be4d10b016dce0566925368a8b08c#file-cve-2024-41597-mdExploit, Third Party Advisory
• https://gist.github.com/DefensiumDevelopers/608be4d10b016dce0566925368a8b08c#file-cve-2024-41597-mdExploit, Third Party Advisory

Published

Jul 19, 2024

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41591DrayTek Vigor3910 devices through 4.3.2.6 allow unauthentica…6.1
• CVE-2024-41592DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based…8
• CVE-2024-41593DrayTek Vigor310 devices through 4.3.2.6 allow a remote atta…9.8
• CVE-2024-41594An issue in DrayTek Vigor310 devices through 4.3.2.6 allows …7.5
• CVE-2024-41595DrayTek Vigor310 devices through 4.3.2.6 allow a remote atta…8
• CVE-2024-41596Buffer Overflow vulnerabilities exist in DrayTek Vigor310 de…8
• CVE-2024-41599Cross Site Scripting vulnerability in RuoYi v.4.7.9 and befo…6.1
• CVE-2024-4160The Download Manager plugin for WordPress is vulnerable to S…5.4
• CVE-2024-41600Insecure Permissions vulnerability in lin-CMS Springboot v.0…7.5
• CVE-2024-41601Insecure Permissions vulnerability in lin-CMS v.0.2.0 and be…7.5
• CVE-2024-41602Cross Site Request Forgery vulnerability in Spina CMS v.2.18…8.8
• CVE-2024-41603Spina CMS v2.18.0 was discovered to contain a Cross-Site Req…9.6