CVE-2018-20006

NONE EPSS 44.9%
Published Dec 10, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Dec 10, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the index.php?id=book URI).

Threat Intelligence

EPSS Exploit Probability
44.9% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
phpokphpok5.0.055any

References 1

  • github.com https://github.com/qinggan/phpok/issues/3
    ExploitIssue TrackingThird Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.