LA
Product
LayerBB
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add LayerBB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-17996 | 6.5 | Mar 17 | LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/ Affected: 1.1.2 |
| CVE-2019-13972 | 6.1 | Jul 19 | LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997 Affected: 1.1.3 |
| CVE-2018-17997 | 6.1 | Mar 17 | LayerBB 1.1.1 allows XSS via the titles of conversations (PMs) Affected: 1.1.1 |
Showing 3
