CVE-2018-17996: Layerbb

Medium severity, CVSS 6.5. EPSS: 3% chance of exploitation in the next 30 days.

LayerBB before 1.1.3 allows CSRF for adding a user via admin/new_user.php, deleting a user via admin/members.php/delete_user/, and deleting content via mod/delete.php/.

Affected products

• Layerbb Layerbb: version 1.1.2 only

Published 2019-03-21. Last modified 2026-06-17.