LA
Product
LayerBB
by LayerBB · last CVE May 16, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch

Add LayerBB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-17996
6.5
3%
Mar 17
LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/
Affected: 1.1.2
CVE-2019-13972
6.1
1%
Jul 19
LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997
Affected: 1.1.3
CVE-2018-17997
6.1
4%
Mar 17
LayerBB 1.1.1 allows XSS via the titles of conversations (PMs)
Affected: 1.1.1
Showing 3