CVE-2026-87901: XSS
Published Oct 23, 2026
·Updated
Improper sanitization in the registration module allows reflected Cross-Site Scripting.
Event History
Oct 23, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The CVSS vector indicates the attack can be performed over the network with low complexity and without authentication or privileges. A user must interact with attacker-controlled content for exploitation to succeed.
2
Which deployments are exposed?
Deployments that make the registration module reachable to users are the relevant exposure scope. The provided data does not identify affected versions or indicate whether any particular configuration is unaffected.
3
What could successful exploitation allow?
The reported impact is high for confidentiality and integrity, and low for availability. This indicates a successful exploit may expose or alter data in the affected security context, with limited availability impact.