Lucene search
WpvulndbWPVDB-ID:8AD9183E-9FAB-43D3-81C1-D84F8CAC9874HistoryApr 19, 2023 - 12:00 a.m.
Liquid Speech Balloon < 1.2 - Settings Update via CSRF
2023-04-1900:00:00
wpscan.com
4
plugin
csrf attack
admin
settings update
0.002 Low
EPSS
Percentile
52.9%
The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| liquid-speech-balloon | lt | 1.2 |
References
Related
cve
cve
CVE-2023-27889
2023-05-10 06:15:14
prion
prion
Cross site request forgery (csrf)
2023-05-10 06:15:00
nvd
nvd
CVE-2023-27889
2023-05-10 06:15:14
jvn
jvn
cvelist
cvelist
CVE-2023-27889
2023-05-10 00:00:00
wordfence
wordfence