CVE-2022-40488

MediumCVSS 6.5

Published: 31/10/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

The risk involves an attacker being able to execute unwanted administrative actions without the victim's knowledge, potentially leading to data integrity or system configuration compromise.

Recommendation

It is recommended to immediately update ProcessWire to the latest available version and implement CSRF protection mechanisms such as anti-CSRF tokens.

Original NVD description (English source)

ProcessWire v3.0.200 was discovered to contain a Cross-Site Request Forgery (CSRF).