CVE-2020-36996

Publication date

2026-01-30 16:16:37

Family

VulnCheck

State

PUBLISHED

Description

PHPFusion 9.03.50 contains a persistent cross-site scripting vulnerability in the print.php page that fails to properly sanitize user-submitted message content. Attackers can inject malicious JavaScript through forum messages that will execute when the print page is generated, allowing script execution in victim browsers.