CVE-2018-20006: XSS
Published Dec 10, 2018
·Updated
An issue was discovered in PHPok v5.0.055. There is a Stored XSS vulnerability via the title parameter to api.php?c=post&f=save (reachable via the index.php?id=book URI).
Affected Software
1 affected component
PhpOK PhpOK=5.0.055
Event History
Dec 10, 2018
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20006?
CVE-2018-20006 is classified as a Stored XSS vulnerability.
2
How do I fix CVE-2018-20006?
To mitigate CVE-2018-20006, ensure proper input validation and sanitization for the title parameter in the affected PHPok version.
3
What versions of PHPok are affected by CVE-2018-20006?
CVE-2018-20006 specifically affects PHPok version 5.0.055.
4
What type of vulnerability is CVE-2018-20006?
CVE-2018-20006 is a Stored Cross-Site Scripting (XSS) vulnerability.
5
How can attackers exploit CVE-2018-20006?
Attackers can exploit CVE-2018-20006 by injecting malicious scripts through the title parameter when saving posts.