CVE-2026-87901

CVSS 8.3 (high) · published 2026-10-23

Improper sanitization in the registration module allows reflected Cross-Site Scripting.

Weakness: CWE-79

Source: NVD CVE-2026-87901

References

• https://www.phpbb.com/community/viewtopic.php?t=2675305

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.