Cross-Site Scripting Vulnerability in LayerBB Product by LayerBB
CVE-2018-17997
6.1MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-17997?
LayerBB version 1.1.1 is susceptible to a Cross-Site Scripting (XSS) vulnerability that can be exploited through the titles of private messages (PMs). This weakness allows attackers to inject malicious scripts, potentially compromising user accounts and data integrity. It is essential for users and administrators to apply the latest security updates and review their systems for any signs of exploitation to safeguard their installations.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.