Description
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| phpBB | phpBB | 3.3.0 – ≤ 3.3.18 | — |
High · 8.3
CVE-2026-87901
EUVD-2026-109101GHSA-jf28-395j-fvfc
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
Published Oct 23, 2026 · Updated Nov 2, 2026 · Assigned by hackerone