CVE-2023-27889 — LIQUID DESIGN Ltd. / LIQUID SPEECH BALLOON

Description (CNA)

Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by having a user view a malicious page.

Affected (CNA)

Vendor / product	Versions
LIQUID DESIGN Ltd. / LIQUID SPEECH BALLOON	affected versions prior to 1.2

CWE

No CWE identifiers supplied.

References

https://wordpress.org/plugins/liquid-speech-balloon/#developers
https://jvn.jp/en/jp/JVN99657911/

ADP enrichment

CVE

No English description supplied.

https://wordpress.org/plugins/liquid-speech-balloon/#developers
https://jvn.jp/en/jp/JVN99657911/

CISA-ADP

No English description supplied.

No references supplied.