CVE-2019-13972: Layerbb

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.

Affected products

• Layerbb Layerbb: version 1.1.3 only

Published 2019-07-19. Last modified 2026-06-17.