Security Advisory

CVE-2020-36996

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-30 16:16:37
Last updated 2026-05-14 02:06:45
Assigner VulnCheck
CVSS score 5.1
State PUBLISHED

Description

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script execution in victim browsers.