CVE-2020-36996 in PHPFusion
Sumário
de MITRE • 30/01/2026
PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script execution in victim browsers.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.