Login Request a demo
LA
Product
LayerBB
by LayerBB · last CVE May 16, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 3Medium 3Low 0
Severity
All severities8Critical2High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LayerBB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-13973
9.8
2%
Jul 19
LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used
Affected: 1.1.3
CVE-2018-17988
9.8
2%
Mar 7
LayerBB 1.1.1 and 1.1.3 has SQL Injection via the search.php search_query parameter
Affected: 1.1.1; 1.1.3
CVE-2019-16531
8.8
3%
Sep 20
LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php
Affected: before 1.1.4
CVE-2019-13974
8.8
1%
Jul 19
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF
Affected: 1.1.3
CVE-2021-47954
8.2
0%
May 16
LayerBB 1.1.4 SQL Injection via search_query Parameter
Affected: 1.1.4
CVE-2018-17996
6.5
3%
Mar 17
LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/
Affected: 1.1.2
CVE-2019-13972
6.1
1%
Jul 19
LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997
Affected: 1.1.3
CVE-2018-17997
6.1
4%
Mar 17
LayerBB 1.1.1 allows XSS via the titles of conversations (PMs)
Affected: 1.1.1
Showing 8