Skip to content
OpenAdvisories
Medium · 6.1 CVE-2024-38953 EUVD-2024-37684GHSA-f6gg-484j-ch5h

phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the ok_f() method under the framework/api/upload_control.php file.

Published Jul 1, 2024 · Updated Mar 20, 2025 · Assigned by mitre