cve/2018/CVE-2018-17997.md

CVE-2018-17997

Description

LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).

POC

Reference

• http://packetstormsecurity.com/files/151015/LayerBB-1.1.1-Cross-Site-Scripting.html
• http://packetstormsecurity.com/files/151015/LayerBB-1.1.1-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/46079/
• https://www.exploit-db.com/exploits/46079/

Github

• https://github.com/ARPSyndicate/cvemon