CVE-2019-13974
HIGHLayerBB 1.1.3 - Cross-Site Request Forgery via conversations.php/cmd/new
Title source: llmDescription
LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_misc
http://blog.topsec.com.cn/%E5%A4%A9%E8%9E%8D%E4%BF%A1%E5%85%B3%E4%BA%8Elayerbb-1-1-3-xss%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/
Scores
CVSS v3
8.8
EPSS
0.0061
EPSS Percentile
45.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (1)
layerbb/layerbb
1.1.3
Published
Jul 19, 2019
Tracked Since
Feb 18, 2026