CVE-2019-17070

CVE-2019-17070 affects the WordPress plugin liquid-speech-balloon (aka LIQUID SPEECH BALLOON) prior to version 1.0.7. The available documents describe a cross-site scripting (XSS) vulnerability (specifically with Internet Explorer) in this plugin. The root cause and specific vulnerable component/...

CVE-2023-27889

CVE-2023-27889 — LIQUID SPEECH BALLOON plugin : A CSRF vulnerability affecting WordPress plugin versions prior to 1.2. The issue allows a remote unauthenticated attacker to hijack a user’s session and perform unintended operations by forcing the user to view a malicious page. A fix exists in vers...