Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by havin…
CVSS 3.1HIGH 8.8·Network·No auth·User interaction·EPSS 0.00457·Published 2023-05-10·Fixed in 1.2CWE-352