Cross Site Scripting (XSS) Vulnerability in phpok 6.4.003
CVE-2024-38953

6.1MEDIUM

Key Information:

What is CVE-2024-38953?

phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.

Score:

6.1

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

CVE-2024-38953 Data