CVE-2019-16108: Phpbb

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode.

Affected products

• Phpbb Phpbb: version 3.2.7 only

Published 2020-03-20. Last modified 2026-06-17.