-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability specifically mentions XSS in Search Users and Search Pages functions. These core admin modules handle search functionality. The functions likely directly incorporate user-supplied search terms into HTML output without proper context-aware escaping. While exact code isn't shown, ProcessWire's module structure and vulnerability pattern match these handler functions. The high confidence comes from: 1) Direct correlation between advertised vulnerability locations (User/Page search) and these module functions 2) Typical XSS patterns in search handlers 3) Commit reference in the gist suggesting fixes in these modules
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| processwire/processwire | composer | <= 3.0.200 |
Ongoing coverage of React2Shell