Description
Contributor Cross Site Scripting (XSS) in LIQUID SPEECH BALLOON <= 1.2.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| lqd | LIQUID SPEECH BALLOON | ≤ 1.2.5 | — |
Medium · 6.5
CVE-2026-65527
EUVD-2026-48128GHSA-pmpp-x56x-f97x
WordPress LIQUID SPEECH BALLOON plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack