Lqd

4 CVEs across 4 Lqd products. Browse Lqd vulnerabilities, severities, and proof-of-concept exploits.

Lqd products with known CVEs

ProductCVEs
Liquid Speech Balloon2
Liquid Blocks1
Liquid Blocks1
Liquid Speech Balloon1
Lqd CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65527Medium6.52026-07-23Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.
CVE-2024-52357Medium6.52024-11-11Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lqd LIQUID BLOCKS liquid-blocks allows Stored XSS.This is…
CVE-2023-27889High8.82023-05-10Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentic…
CVE-2019-17070Medium6.12019-10-10The liquid-speech-balloon (aka LIQUID SPEECH BALLOON) plugin before 1.0.7 for WordPress allows XSS with Internet Explorer.