5 matches found
CVE-2019-13972
LayerBB 1.1.3 allows XSS via the application/commands/new.php pmtitle variable, a related issue to CVE-2019-17997...
6.1CVSS5.6AI score
SaveExploits0References1
CVE-2019-13972
LayerBB 1.1.3 allows XSS via the application/commands/new.php pmtitle variable, a related issue to CVE-2019-17997...
6.1CVSS6.1AI score0.00865EPSS
SaveExploits1References1
Sql injection
LayerBB 1.1.3 allows XSS via the application/commands/new.php pmtitle variable, a related issue to CVE-2019-17997...
4.3CVSS6AI score0.00865EPSS
SaveExploits1References1Affected Software1
CVE-2019-13972
LayerBB 1.1.3 contains an XSS vulnerability in the pm_title parameter of application/commands/new.php (CVE-2019-13972). The issue is caused by insufficient input validation, enabling cross-site scripting and potentially exposing client-side data. This CVE is related to CVE-2019-17997. Publicly pr...
6.1CVSS5.9AI score0.00865EPSS
SaveExploits1References1Affected Software1
20