CVE-2024-38953

MEDIUM CVSS: 6.1 Published: 2024-07-01 Modified: 2026-06-17

Description

phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.

Affected Platforms

Phpok Phpok

Weakness Type

CWE-79, CWE-79

References