Описание
Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by having a user view a malicious page.
Ссылки
- Third Party Advisory
- Release Notes
- Third Party Advisory
- Release Notes
Уязвимые конфигурации
Конфигурация 1Версия до 1.2 (исключая)
cpe:2.3:a:lqd:liquid_speech_balloon:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 75%
0.009
Низкий
8.8 High
CVSS3
Дефекты
CWE-352
CWE-352
Связанные уязвимости
CVSS3: 8.8
github
больше 2 лет назад
Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by having a user view a malicious page.
EPSS
Процентиль: 75%
0.009
Низкий
8.8 High
CVSS3
Дефекты
CWE-352
CWE-352