CVE-2026-87901

No fix known EPSS <1%CVSS 8.3

Improper sanitization in the registration module allows reflected Cross-Site Scripting.

Published 2026-10-23 · CVE record · OSV

Products: phpBB