CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-08-30

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Phpok (Phpok)

References

• https://unothing.github.io/posts/phpok48278/