Liquid Speech Balloon Security Vulnerabilities and Issues — Liquid Speech Balloon CVE List

Lucene search

LqdLiquid Speech Balloon

2 matches found

CVE•added 2019/10/10 12:10 p.m.•66 views

CVE-2019-17070

The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.

6.1CVSS6AI score0.00439EPSS

CVE•added 2023/05/10 6:15 a.m.•48 views

CVE-2023-27889

Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by having a user view a malicious page.

8.8CVSS8.9AI score0.0072EPSS