Skip to content

CVE-2018-20006 An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the index.php?id=book URI).

MediumCVSS 6.1 EPSS 0.61%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the index.php?id=book URI).

Affected products

ProductAffected versionsFixed in
phpok = 5.0.055 No fix listed

References

  • github.com exploit issue-tracking third-party-advisory