Read the docs

lqd

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

lqd records in CISA KEV

No lqd vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Liquid Speech Balloon 2 records MEDIUM Liquid Blocks 1 record LOW

Records

4 records

TI-2023-12480 CVE-2023-27889 · GHSA-wxpm-6qqj-jg73

Cross-site request forgery in LIQUID SPEECH BALLOON

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by havin…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00457 Published 2023-05-10 Fixed in 1.2 CWE-352
TI-2024-35029 CVE-2024-52357 · GHSA-jqqp-p39x-w5h9

WordPress LIQUID BLOCKS plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lqd LIQUID BLOCKS liquid-blocks allows Stored XSS.This issue affects LIQUID BLOCKS: from n/a through <= 1.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00256 Published 2024-11-11 No fix listed CWE-79
Open these records in search →